#CVE

共收录 69535 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

CVE-2026-43840

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

CVE-2026-43839

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

CVE-2026-43838

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

CVE-2026-43837

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

CVE-2026-43836

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when attempting to log in with a valid username compared to ...

CVE-2026-11960

Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses whe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitisation of user input in the ‘city’ and ‘province’ fields i...

CVE-2026-11959

Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthentic...

CVE-2026-113469

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature ve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to cra...

CVE-2026-113465

It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

CVE-2026-101201

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permane...

CVE-2026-43835

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.

CVE-2026-43834

A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database c...

CVE-2026-113407

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database c...

CVE-2026-113406

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database c...

CVE-2026-113405

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布HIGH

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving pr...

CVE-2026-112177

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitte

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield serv...

CVE-2026-111090

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布MEDIUM

The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled. This oversight allows an attac...

CVE-2024-2323

The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history vali

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all versions up to, and including, 5.2.0 due to insuffi...

CVE-2026-93878

The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious se...

CVE-2026-113404

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard

历史摘要 · 未重新核验 · NVD