#CVE
共收录 70327 条相关情报。
← 返回所有主题 漏洞预警2026-10-12 发布INFO
CVE-2026-104774
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the t:jsDe
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-104364
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-104332
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2025-27902
IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external si
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2025-27897
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2025-27896
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2025-27895
IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2021-48009
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-89140
Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authent
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-87744
A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security co
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-85471
A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notif
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-83536
A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential tim
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-83535
A flaw was found in openstack-network-exporter. When an operator configures user authentication but omits or misconfigur
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-78404
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd uti
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-65954
PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\Abstr
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-59977
ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the /delete/{id} endpoint uses HTTP GET for permanen
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-59976
ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized conve
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-57143
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG prov
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-57118
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-18166
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could
历史摘要 · 未重新核验 · NVD