#CVE

共收录 57397 条相关情报。

漏洞预警2026-10-29 发布HIGH

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts contains a RegistryClient.signIn() method that sto...

CVE-2026-118763

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/regis

来源摘录 · NVD / GitHub Advisory / OSV.dev

#advisory #cve #cwe-522 #npm #severity:high

漏洞预警2026-10-29 发布CRITICAL

Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write ...

CVE-2026-118762

Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml wo

来源摘录 · NVD

#cve #cwe-829

漏洞预警2026-10-29 发布HIGH

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives witho...

CVE-2026-118761

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-409 #go #severity:high

漏洞预警2026-10-29 发布MEDIUM

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the frontend artifact routes did not check whether a...

CVE-2026-118760

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.1

来源摘录 · NVD

#cve #cwe-639 #cwe-862

漏洞预警2026-10-29 发布HIGH

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{nod...

CVE-2026-118759

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #cwe-862 #go #severity:high

漏洞预警2026-10-29 发布HIGH

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=vo...

CVE-2026-118758

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布HIGH

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires exi...

CVE-2026-115805

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local use

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.

CVE-2026-107060

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to anoth

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布INFO

An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authenticat...

CVE-2026-107059

An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布CRITICAL

An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state.

CVE-2026-107058

An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another us

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-29 发布CRITICAL

An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.

CVE-2026-107057

An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.

来源摘录 · NVD

#cve #cwe-926

漏洞预警2026-10-29 发布INFO

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victi...

CVE-2026-107056

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布HIGH

Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.

CVE-2026-107055

Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布INFO

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of th...

CVE-2026-107053

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write a

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布HIGH

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via...

CVE-2026-107052

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attack

来源摘录 · NVD

#cve #cwe-276

漏洞预警2026-10-29 发布HIGH

Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM home-automation c...

CVE-2026-107051

Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arb

来源摘录 · NVD

#cve #cwe-926

漏洞预警2026-10-29 发布INFO

An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.

CVE-2026-107050

An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in the

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布HIGH

An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI string.

CVE-2026-107049

An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supply

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-29 发布INFO

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request.

CVE-2026-107048

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布HIGH

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.

CVE-2026-107047

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the ap

来源摘录 · NVD

#cve #cwe-732