#CVE

共收录 57397 条相关情报。

漏洞预警2026-10-29 发布INFO

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin...

CVE-2026-103093

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulner

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-60111

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-29 发布INFO

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).

CVE-2026-51912

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witn

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布HIGH

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote au...

CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in su

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布INFO

SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py. A remote authenticated attacker f...

CVE-2026-51903

SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controll

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布MEDIUM

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows authenticated users from one ...

CVE-2026-51902

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布CRITICAL

DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the val...

CVE-2026-51863

DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布INFO

modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The save_text_file method accept...

CVE-2026-51851

modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:Fil

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布INFO

Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t block size to int without a bounds check....

CVE-2026-118769

Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size con

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-125 #cwe-681 #cwe-787

漏洞预警2026-10-29 发布INFO

Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response from a certificate's Authority Information Access URL wit...

CVE-2026-118768

Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-347

漏洞预警2026-10-29 发布MEDIUM

Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char* values without consistently reje...

CVE-2026-118767

Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containi

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-158

漏洞预警2026-10-29 发布MEDIUM

Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while posting an OCSP request to the URI in a certificate's Autho...

CVE-2026-118766

Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while po

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-918

漏洞预警2026-10-29 发布INFO

socket.getaddrinfo() previously accepted null bytes within host and port parameters which can cause the values to be silently truncated.

CVE-2026-116566

socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be

来源摘录 · NVD

#cve #cwe-158

漏洞预警2026-10-29 发布HIGH

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outs...

CVE-2026-107347

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-29 发布MEDIUM

HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API endpoints that may allow an authenticated user with read p...

CVE-2026-102260

HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API e

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-29 发布INFO

SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and earlier, `@sd-jwt/decode`, also used by `@sd-jwt/core`, si...

CVE-2026-62374

SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and e

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-176 #cwe-754

漏洞预警2026-10-29 发布HIGH

SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database

CVE-2026-11587

SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-89

漏洞预警2026-10-29 发布HIGH

Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user ...

CVE-2026-119115

Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer)

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-29 发布INFO

Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls randomize with an empty output buffer while the ge...

CVE-2026-118765

Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-335

漏洞预警2026-10-29 发布MEDIUM

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to 11.0.1, src/index.ts implements firstPhasePreProcess() so that, ...

CVE-2026-118764

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to 11.0.1,

来源摘录 · NVD / GitHub Advisory / OSV.dev

#advisory #cve #cwe-405 #npm #severity:medium