#CVE

共收录 70309 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped Liquid engine befor...

CVE-2026-113619

In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template sub

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布MEDIUM

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update con...

CVE-2026-113470

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

CVE-2026-113401

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

CVE-2026-113400

Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbir

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布CRITICAL

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

CVE-2026-113399

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. P...

CVE-2026-113392

A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload En...

CVE-2026-113391

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Int...

CVE-2026-113390

A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the p...

CVE-2026-105941

The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes withou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Re...

CVE-2026-18205

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.39.2, on on-premises and cloud deployments, allows an una...

CVE-2026-14933

Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt...

CVE-2026-113583

Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布MEDIUM

A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured password is passed directly as a command-line argument to an u...

CVE-2026-113496

A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured passw

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command-line arguments to background helper processes during ima...

CVE-2026-113495

A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the co...

CVE-2026-113389

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the compo...

CVE-2026-113388

A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manipulati...

CVE-2026-113385

A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Cla

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布HIGH

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredH...

CVE-2026-105949

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image in...

CVE-2026-105312

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbi

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set spec.kafkaClusters[].credentials.kafka...

CVE-2026-105311

The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custo

来源摘录 · NVD