#CVE

共收录 69142 条相关情报。

漏洞预警2026-10-21 发布MEDIUM

The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive ...

CVE-2026-109681

The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rog

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-20 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-6945

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布MEDIUM

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lea...

CVE-2026-113705

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file

来源摘录 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-10-20 发布MEDIUM

Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With `gif_consolidate => 1`, palette indices from the image are used w...

CVE-2026-112202

Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With `gif_con

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-20 发布INFO

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to...

CVE-2026-9825

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over une

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-10-20 发布INFO

IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied ...

CVE-2026-94402

IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncate

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-20 发布INFO

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of use...

CVE-2026-93888

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-10-20 发布MEDIUM

IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP re...

CVE-2026-93744

IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improp

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-20 发布INFO

IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive...

CVE-2026-93442

IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-20 发布INFO

IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-93441

IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-10-20 发布INFO

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.

CVE-2026-92559

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due t

历史摘要 · 未重新核验 · NVD

#cve #cwe-1327

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are 12.2.1.4.0 and 14....

CVE-2026-91668

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Sup

来源摘录 · NVD

#cve #cwe-269

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker w...

CVE-2026-91665

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily ex

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker w...

CVE-2026-91664

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily ex

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2026-91663

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily ex

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged a...

CVE-2026-91662

Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. D

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2026-91661

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily ex

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2026-91660

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily ex

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with ...

CVE-2026-91659

Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily explo

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2026-91658

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily ex

历史摘要 · 未重新核验 · NVD

#cve