#CVE

共收录 70309 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipulating User State.This issue affects WP User Manager: from n/a through 2.9.25.

CVE-2026-112823

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipulating User State.Th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Rootblox rootblox allows Stored XSS.This issue affects Rootblox:...

CVE-2026-111843

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Rootblo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version 1.3.2.Final, the AndroidA2AHttpClient synchronous ...

CVE-2026-111765

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authorization on task rea...

CVE-2026-111764

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTask

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised remote agent can cause the default JDK-based client to...

CVE-2026-111763

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.Thi...

CVE-2026-109700

Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read replication credentials...

CVE-2026-107755

Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language ...

CVE-2025-71436

Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbi...

CVE-2026-97400

In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent D

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulti...

CVE-2026-96402

A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, le

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py

CVE-2026-95168

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of the module's buffer the privileged queue copy may touch ...

CVE-2026-95111

A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is therefore read past the...

CVE-2026-92454

The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read verbatim from the resource file and never bounds it ag...

CVE-2026-92449

`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

`gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and `GX_BINRES_DATA_INFO` has no field to carry one. Every read is ...

CVE-2026-92446

`gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and `GX_BI

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configu...

CVE-2026-92162

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and `gx_page_header_last_glyph` are read verbatim from t...

CVE-2026-91189

The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph`

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has already supplied transparency, but nothing prevents an IHDR...

CVE-2026-91186

The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SOF0` frame header after `SOS` re-runs the frame header parser after the output...

CVE-2026-91059

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SOF0` frame header aft

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/SessionTokenAuthenticate of the file c...

CVE-2026-113466

A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function

历史摘要 · 未重新核验 · NVD