#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name an...

CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. Th...

CVE-2026-88838

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attack...

CVE-2026-88834

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence or

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布MEDIUM

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP...

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated pa

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatc...

CVE-2026-85990

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes...

CVE-2026-85733

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker ima

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as ...

CVE-2026-82416

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_E...

CVE-2026-78799

Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks witho...

CVE-2026-77459

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A flaw in Portal for ArcGIS allows unauthenticated access to certain /portaladmin/local API endpoints under specific conditions. This could enable an attacker to access administ...

CVE-2026-69227

A flaw in Portal for ArcGIS allows unauthenticated access to certain /portaladmin/local API endpoints under specific con

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account registration is disabled (disableSign...

CVE-2026-69226

A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authen...

CVE-2026-66057

Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitize

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack ag...

CVE-2026-61642

Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database e...

CVE-2026-55823

Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a coun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concat...

CVE-2026-55562

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service o...

CVE-2026-55183

RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealmRoles methods in manager/src/main/java/org/openremote/man...

CVE-2026-54641

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in agent/src/main/java/org/openremote/agent/protocol/knx/KNXPr...

CVE-2026-54640

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in ag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in modules/import/Im...

CVE-2026-54454

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.

CVE-2026-53562

Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects Uni

历史摘要 · 未重新核验 · NVD