#CVE

共收录 69142 条相关情报。

← 返回所有主题
漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could move field extractions or field trans...

CVE-2026-76294

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could execute arbitrary operating-system c...

CVE-2026-76293

In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does no...

CVE-2026-76292

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.1

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_search capability could bypass the expected safeguards in the...

CVE-2026-76291

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_sear

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splu...

CVE-2026-76290

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk Enterprise instance u...

CVE-2026-76289

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk Web JavaScript logger endpoint...

CVE-2026-76288

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single cra

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or edit_data_management_pipeline_job capability could r...

CVE-2026-76287

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capabilit

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument ...

CVE-2026-114441

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布HIGH

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer_id/tic...

CVE-2026-114440

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/del

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session...

CVE-2026-114439

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control plane enrollment status handler (HandleEnrollStatus at G...

CVE-2026-103090

Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password.  ...

CVE-2026-100420

A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as soon a...

CVE-2026-94423

Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host ke

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync buil...

CVE-2026-94140

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes St

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected...

CVE-2026-91403

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. ...

CVE-2026-114509

Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based AP

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operati...

CVE-2026-114508

Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布MEDIUM

Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from im->blocks[0].ptr even when PILLO...

CVE-2026-114501

Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly cont

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation o...

CVE-2026-114384

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown funct

历史摘要 · 未重新核验 · NVD