#CVE

共收录 70327 条相关情报。

← 返回所有主题

漏洞预警2026-10-15 发布INFO

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suit...

CVE-2026-16437

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and

来源摘录 · NVD

#cve #cwe-640

漏洞预警2026-10-15 发布INFO

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suit...

CVE-2026-16436

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and

来源摘录 · NVD

#cve #cwe-640

漏洞预警2026-10-15 发布CRITICAL

When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap to zero, resulting in a near-zero-len...

CVE-2026-101307

When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused

来源摘录 · NVD

#cve #cwe-122 #cwe-787

漏洞预警2026-10-14 发布MEDIUM

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise validates archive entry names but extracts them...

CVE-2026-104109

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0,

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-14 发布INFO

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a roo...

CVE-2026-0320

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-14 发布INFO

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session u...

CVE-2026-0319

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an

来源摘录 · NVD

#cve #cwe-754

漏洞预警2026-10-14 发布INFO

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of servi...

CVE-2026-0318

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software o

来源摘录 · NVD

#cve #cwe-754

漏洞预警2026-10-14 发布INFO

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) cond...

CVE-2026-0317

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only a

来源摘录 · NVD

#cve #cwe-754

漏洞预警2026-10-14 发布INFO

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload...

CVE-2026-0316

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticat

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-14 发布MEDIUM

A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. Such manipulation leads ...

CVE-2026-110669

A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/de

来源摘录 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-10-14 发布INFO

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by se...

CVE-2026-0321

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network

来源摘录 · NVD

#cve #cwe-754

漏洞预警2026-10-14 发布HIGH

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG_ENABLE_TCPIP in src/net_builtin.c does not reject a TCP option who...

CVE-2026-73261

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG_ENABLE_TC

来源摘录 · NVD

#cve #cwe-125 #cwe-20

漏洞预警2026-10-14 发布HIGH

Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts unauthenticated JSON-RPC tools/call requ...

CVE-2026-55786

Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /m

来源摘录 · NVD

#cve #cwe-306 #cwe-78

漏洞预警2026-10-14 发布HIGH

Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset codes via POST /api/v1/users/r...

CVE-2026-110770

Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to

来源摘录 · NVD

#cve #cwe-307

漏洞预警2026-10-14 发布MEDIUM

FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted...

CVE-2026-110765

FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature

来源摘录 · NVD

#cve #cwe-347

漏洞预警2026-10-14 发布MEDIUM

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.98 until 1.6.0, the pipecat-ai package's built-in developm...

CVE-2026-102682

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.9

来源摘录 · NVD

#cve #cwe-345 #cwe-770 #cwe-862

漏洞预警2026-10-14 发布MEDIUM

In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalizati...

CVE-2026-102479

In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonic

来源摘录 · NVD

#cve #cwe-444

漏洞预警2026-10-14 发布HIGH

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FpySequencer STORE directive st...

CVE-2026-92158

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati

来源摘录 · NVD

#cve #cwe-190 #cwe-787

漏洞预警2026-10-14 发布INFO

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-port ...

CVE-2026-92152

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati

来源摘录 · NVD

#cve #cwe-129

漏洞预警2026-10-14 发布MEDIUM

A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash...

CVE-2026-86856

A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed whe

来源摘录 · NVD

#cve #cwe-787