#CVE

共收录 56584 条相关情报。

漏洞预警2026-10-29 发布HIGH

A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information about the host de...

CVE-2026-119249

A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found i

来源摘录 · NVD

#cve #cwe-1327

漏洞预警2026-10-29 发布HIGH

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions a...

CVE-2026-119168

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration th

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-29 发布HIGH

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS#12 MAC or PKCS#12 password-based ...

CVE-2026-118782

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-1284 #cwe-354 #npm #severity:high

漏洞预警2026-10-29 发布LOW

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.modInv...

CVE-2026-118781

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-835 #npm #severity:low

漏洞预警2026-10-29 发布LOW

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pki.verifyCertificateChain(...

CVE-2026-118780

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-295 #cwe-471 #npm #severity:low

漏洞预警2026-10-29 发布HIGH

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode(), lib/pem.js, m...

CVE-2026-118779

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-1333 #cwe-400 #npm #severity:high

漏洞预警2026-10-29 发布MEDIUM

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(...

CVE-2026-118778

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-476 #npm #severity:medium

漏洞预警2026-10-29 发布MEDIUM

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set...

CVE-2026-118777

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-1321 #npm #severity:medium

漏洞预警2026-10-29 发布LOW

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used decipher.finish(), CBC and ...

CVE-2026-118776

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the

来源摘录 · NVD

#cve #cwe-20 #cwe-354

漏洞预警2026-10-29 发布LOW

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer() in lib/asn1.js did not range-check the first...

CVE-2026-118775

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-190 #npm #severity:low

漏洞预警2026-10-29 发布LOW

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used certificate.verify(child), ...

CVE-2026-118774

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the

来源摘录 · NVD

#cve #cwe-347

漏洞预警2026-10-29 发布MEDIUM

Glob matches files using patterns the shell uses. From 9.0.0 until 14.0.2, abort branches in src/walker.ts, including GlobUtil.walkCB(), GlobUtil.walkCB2(), GlobUtil.walkCBSync(...

CVE-2026-118773

Glob matches files using patterns the shell uses. From 9.0.0 until 14.0.2, abort branches in src/walker.ts, including Gl

来源摘录 · NVD / GitHub Advisory / OSV.dev

#advisory #cve #cwe-400 #npm #severity:medium

漏洞预警2026-10-29 发布HIGH

joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string().email({ multiple: true }) rule uses a separator re...

CVE-2026-118772

joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.st

来源摘录 · NVD / GitHub Advisory / OSV.dev

#advisory #cve #cwe-1333 #npm #severity:high

漏洞预警2026-10-29 发布INFO

ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext password t...

CVE-2026-103094

ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. Thi

来源摘录 · NVD

#cve #cwe-256

漏洞预警2026-10-29 发布INFO

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin...

CVE-2026-103093

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulner

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-60111

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-29 发布INFO

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).

CVE-2026-51912

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witn

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布HIGH

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote au...

CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in su

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布INFO

SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py. A remote authenticated attacker f...

CVE-2026-51903

SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controll

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布INFO

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows authenticated users from one ...

CVE-2026-51902

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/

来源摘录 · NVD / OSV.dev

#advisory #cve