#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Th...

CVE-2026-109712

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109711

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109710

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and ...

CVE-2026-109709

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird...

CVE-2026-109708

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109707

Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox E

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109706

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Fir

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 1...

CVE-2026-109705

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109704

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Re...

CVE-2026-109407

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the componen...

CVE-2026-109406

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderSer

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/co...

CVE-2026-109405

A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublish

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the compone...

CVE-2026-109404

A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/c...

CVE-2026-109403

A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no p...

CVE-2026-94410

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake: from v1.3 before v1.4.

CVE-2026-89279

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an authentica...

CVE-2026-63316

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布HIGH

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) ...

CVE-2026-109832

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPServ...

CVE-2026-109402

A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the component API Tool Co...

CVE-2026-109190

A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of th

历史摘要 · 未重新核验 · NVD