#CVE

共收录 70327 条相关情报。

← 返回所有主题

漏洞预警2026-10-16 发布MEDIUM

A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to r...

CVE-2026-89088

A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-16 发布MEDIUM

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocat...

CVE-2026-89085

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-16 发布LOW

A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a pr...

CVE-2026-17591

A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-16 发布MEDIUM

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash dire...

CVE-2026-111802

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-16 发布HIGH

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/container_registry_...

CVE-2026-96626

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and

来源摘录 · NVD

#cve #cwe-200 #cwe-522

漏洞预警2026-10-16 发布HIGH

A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previe...

CVE-2026-62439

A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for im

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-16 发布MEDIUM

A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially c...

CVE-2026-62438

A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory conte

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-16 发布HIGH

Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to a stored paired-cl...

CVE-2026-111044

Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-16 发布HIGH

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Spa...

CVE-2026-61726

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, St

来源摘录 · NVD

#cve #cwe-284 #cwe-639 #cwe-863

漏洞预警2026-10-16 发布HIGH

JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for ov...

CVE-2026-102834

JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-16 发布MEDIUM

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getm...

CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUM

来源摘录 · NVD

#cve #cwe-1050

漏洞预警2026-10-16 发布MEDIUM

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) serv...

CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wra

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-16 发布MEDIUM

Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user t...

CVE-2026-111793

Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-type

来源摘录 · NVD

#cve #cwe-669

漏洞预警2026-10-16 发布MEDIUM

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A lo...

CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relyin

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-16 发布HIGH

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspa...

CVE-2026-111605

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated works

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-16 发布HIGH

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENT...

CVE-2026-97380

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

来源摘录 · NVD

#cve #cwe-620 #cwe-863

漏洞预警2026-10-16 发布MEDIUM

PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules. From 5.0.0 until 9.3.15, the /api/statistic/analysis/fie...

CVE-2026-62362

PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules.

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-16 发布MEDIUM

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes unvalidated sort_order and order_field strings into ...

CVE-2026-59962

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, pa

来源摘录 · NVD

#cve #cwe-943

漏洞预警2026-10-16 发布CRITICAL

Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers/<id>/exec does not enforce authentication on the WebSock...

CVE-2026-57169

Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers

来源摘录 · NVD

#cve #cwe-306 #cwe-862

漏洞预警2026-10-16 发布MEDIUM

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful M...

CVE-2026-57446

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Valu

来源摘录 · NVD

#cve #cwe-415 #cwe-664 #cwe-672