#CVE

共收录 57397 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布CRITICAL

An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain...

CVE-2026-90868

An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality ...

CVE-2026-90867

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locatio...

CVE-2026-90866

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated...

CVE-2026-90865

An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modi...

CVE-2026-90864

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administ...

CVE-2026-90863

Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s pa...

CVE-2026-90862

Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain ...

CVE-2026-90861

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-88090

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-88078

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to p

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-88077

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

CVE-2026-85899

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-85897

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-85890

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-85330

Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows authenticated use...

CVE-2026-84296

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive ...

CVE-2026-84295

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allo

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticat...

CVE-2026-84294

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 20

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a restricted directory.

CVE-2026-77819

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to im

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitization of secrets during flow and project...

CVE-2026-77817

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to

来源摘录 · NVD