#CVE

共收录 69142 条相关情报。

漏洞预警2026-10-24 发布MEDIUM

Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceController.getAddressBook handler that allows authenticated...

CVE-2026-116017

Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceCo

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-24 发布HIGH

yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level data scope restrictions by sending a data-permissio...

CVE-2026-116016

yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-

来源摘录 · NVD

#cve #cwe-807

漏洞预警2026-10-24 发布HIGH

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A...

CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bi

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-24 发布LOW

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_name() that fails to check resource record lengths against...

CVE-2026-116013

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_n

来源摘录 · NVD

#cve #cwe-130

漏洞预警2026-10-24 发布LOW

Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bi...

CVE-2026-116012

Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining

来源摘录 · NVD

#cve #cwe-197

漏洞预警2026-10-24 发布MEDIUM

RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write records for students outside their course period by supplying...

CVE-2026-116010

RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write reco

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-24 发布HIGH

Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write arbitrary files by supplying ../ sequences in the nam...

CVE-2026-116009

Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to wr

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-24 发布MEDIUM

DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allows any authenticated user to reassign projects without th...

CVE-2026-116008

DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allo

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-24 发布MEDIUM

IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept details, credentials, and client information from projec...

CVE-2026-115998

IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-24 发布MEDIUM

BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, co...

CVE-2026-115994

BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targ

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-24 发布MEDIUM

Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with e...

CVE-2026-115993

Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker t

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-24 发布HIGH

Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects

CVE-2026-115975

Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delet

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-24 发布MEDIUM

A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. T...

CVE-2026-115802

A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/Aut

来源摘录 · NVD

#cve #cwe-829

漏洞预警2026-10-24 发布MEDIUM

BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When ...

CVE-2026-108013

BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust cer

来源摘录 · NVD

#cve #cwe-295

漏洞预警2026-10-24 发布HIGH

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions...

CVE-2026-115807

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v

来源摘录 · NVD

#cve #cwe-269

漏洞预警2026-10-24 发布CRITICAL

The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted in...

CVE-2026-115806

The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-24 发布MEDIUM

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate C...

CVE-2026-115929

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root cer

来源摘录 · NVD

#cve #cwe-295

漏洞预警2026-10-23 发布CRITICAL

Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could...

CVE-2026-115931

Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not r

来源摘录 · NVD

#cve #cwe-470 #cwe-73

漏洞预警2026-10-23 发布HIGH

Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allo...

CVE-2026-115938

Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is ev

来源摘录 · NVD

#cve #cwe-1336

漏洞预警2026-10-23 发布HIGH

The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together: * commerceTransactionHash — selects which C...

CVE-2026-115937

The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong

来源摘录 · NVD

#cve #cwe-345