#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-19 发布MEDIUM

Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in ...

CVE-2026-79620

Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answ

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through...

CVE-2026-79613

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could a

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could o...

CVE-2026-76994

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can retrieve the invited-user ...

CVE-2026-68482

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenti

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question operation controller gates hide/show operations on the wrong permission check...

CVE-2026-64945

A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question operation controller

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The imp...

CVE-2026-64944

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer.

来源摘录 · NVD

漏洞预警2026-10-19 发布INFO

MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and cli_onl...

CVE-2026-112192

MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settin

来源摘录 · NVD

漏洞预警2026-10-19 发布INFO

MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. ...

CVE-2026-112188

MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sens

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project admin permission, an cache API maybe used to cause computed...

CVE-2026-108837

Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project ad

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue affects Apache Kylin: from 4...

CVE-2026-108833

Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on do

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor unless job services are exposed to public network, which ...

CVE-2026-108823

Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network. This issue af...

CVE-2026-108780

Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin back

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode...

CVE-2026-108776

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. The

来源摘录 · NVD

漏洞预警2026-10-19 发布CRITICAL

Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to publi...

CVE-2026-108771

Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house ...

CVE-2026-108766

Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house...

CVE-2026-108764

Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-h...

CVE-2026-108762

Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are dire

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature pol...

CVE-2026-16460

A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's con

来源摘录 · NVD

漏洞预警2026-10-18 发布HIGH

Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal keys. When Gitea trusts a user certificate autho...

CVE-2026-109553

Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only p

来源摘录 · NVD

漏洞预警2026-10-18 发布MEDIUM

The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users without write access, although the API did. A signed-in us...

CVE-2026-107686

The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users w

来源摘录 · NVD