#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() acce...

CVE-2026-53709

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.

CVE-2026-53420

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privileg...

CVE-2026-53418

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure lo...

CVE-2026-4869

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compress

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of Hyper...

CVE-2026-18228

HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved ma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt comm...

CVE-2026-12656

A denial-of-service security issue exists in the affected product and version. The security issue stems from improper ha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result i...

CVE-2026-12655

A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布HIGH

An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker with access t...

CVE-2026-11732

An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR route

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management servic...

CVE-2026-11731

An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predic...

CVE-2026-11730

Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functiona...

CVE-2026-109523

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin...

CVE-2026-109522

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file change...

CVE-2026-109521

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.

CVE-2026-108185

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to con

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.

CVE-2026-108184

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an info

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauth...

CVE-2026-107918

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated admini

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unau...

CVE-2026-107917

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated admi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding....

CVE-2026-107460

Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-shee

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages() cou...

CVE-2026-106108

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/ap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc can associate one streamNACK ...

CVE-2026-104192

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStrea

历史摘要 · 未重新核验 · NVD