#CVE

共收录 70327 条相关情报。

漏洞预警2026-10-13 发布MEDIUM

The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfp_ag.c keeps its struct bt_hfp_ag objects in a static pool indexed by AC...

CVE-2026-19940

The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfp_ag.c keeps it

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-13 发布MEDIUM

The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP request. Every response handler in subsy...

CVE-2026-19939

The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device

来源摘录 · NVD

#cve #cwe-825

漏洞预警2026-10-13 发布INFO

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read u...

CVE-2026-110131

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id}

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-13 发布INFO

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenticated memb...

CVE-2026-110129

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundContr

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/orde...

CVE-2026-110128

fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to re

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-13 发布INFO

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other m...

CVE-2026-110127

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' ...

CVE-2026-110126

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying ...

CVE-2026-110125

Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenan...

CVE-2026-110124

FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authent

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/con...

CVE-2026-110123

Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-13 发布INFO

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to change other stores' product freight templates via ...

CVE-2026-110122

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another ...

CVE-2026-110121

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows authenticated members to access other members' data by supp...

CVE-2026-110120

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows au

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwrite and delete othe...

CVE-2026-110119

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users' workflow tasks via /vue/button...

CVE-2026-110118

WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complet

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated low-privileged employees to modify system-wide level...

CVE-2026-110117

SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authentic

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-13 发布INFO

Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to wr...

CVE-2026-110116

Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager store

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-13 发布INFO

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthent...

CVE-2026-110115

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileCo

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-13 发布INFO

FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public e...

CVE-2026-110114

FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to dele

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-13 发布INFO

PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController tradeAddress/save handler that allows authenticated member...

CVE-2026-110113

PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController t

历史摘要 · 未重新核验 · NVD

#cve #cwe-639