#CVE

共收录 69142 条相关情报。

← 返回所有主题

漏洞预警2026-10-23 发布MEDIUM

An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to insert calendar invitations attributed to another user. T...

CVE-2026-93629

An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to

来源摘录 · NVD

#cve #cwe-290

漏洞预警2026-10-23 发布MEDIUM

An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to forge another attendee's respon...

CVE-2026-93628

An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an

来源摘录 · NVD

#cve #cwe-290

漏洞预警2026-10-23 发布MEDIUM

An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to cancel or modify an existing m...

CVE-2026-93627

An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an

来源摘录 · NVD

#cve #cwe-290

漏洞预警2026-10-23 发布MEDIUM

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication ...

CVE-2026-57207

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running w

来源摘录 · NVD

#cve #cwe-1059 #cwe-306

漏洞预警2026-10-23 发布INFO

The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event trackin...

CVE-2026-55826

The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to befo

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-23 发布MEDIUM

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHCPv6 self-loop detection at dhcpv6.c:720 uses a network-by...

CVE-2026-55606

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHC

来源摘录 · NVD

#cve #cwe-126

漏洞预警2026-10-23 发布CRITICAL

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byt...

CVE-2026-53921

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 I

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-23 发布INFO

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message `first` lease pointer so mu...

CVE-2026-53918

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 I

来源摘录 · NVD

#cve #cwe-416 #cwe-672 #cwe-825

漏洞预警2026-10-23 发布HIGH

A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra account to execute arbitrary commands as root. The installe...

CVE-2026-50057

A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra ac

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-23 发布HIGH

A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra account to execute arbitrary commands as root...

CVE-2026-50056

A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the

来源摘录 · NVD

#cve #cwe-88

漏洞预警2026-10-23 发布MEDIUM

A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests to /h/* to populate servlet attributes intended for trusted intern...

CVE-2026-50053

A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests to /h/* t

来源摘录 · NVD

#cve #cwe-642

漏洞预警2026-10-23 发布MEDIUM

A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume another user’s mailbox quota by repeatedly sharing and revok...

CVE-2026-115786

A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume ano

来源摘录 · NVD

#cve #cwe-682

漏洞预警2026-10-23 发布MEDIUM

An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) allows an ordinary authenticated user with account options e...

CVE-2026-115785

An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) all

来源摘录 · NVD

#cve #cwe-93

漏洞预警2026-10-23 发布MEDIUM

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /baser/api/bc-mail/mail_messages/add/{mailContentId}.json end...

CVE-2026-115480

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /bas

来源摘录 · NVD

#cve #cwe-693 #cwe-799

漏洞预警2026-10-23 发布MEDIUM

baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visitor can supply a comma-separated address list in a pub...

CVE-2026-115479

baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated v

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-20

漏洞预警2026-10-23 发布HIGH

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, global shortcode expansion runs over the complete rendered page, including HT...

CVE-2026-115457

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, global shortcode exp

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-23 发布HIGH

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area entity serializes widgets only when the submitted value is an...

CVE-2026-114624

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area enti

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-23 发布HIGH

baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFile...

CVE-2026-114622

baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcTheme

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-180 #cwe-22

漏洞预警2026-10-23 发布HIGH

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request quer...

CVE-2026-114621

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail acti

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-23 发布INFO

Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain...

CVE-2026-114357

Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmwa

来源摘录 · NVD

#cve #cwe-306