#CVE

共收录 58490 条相关情报。

← 返回所有主题

漏洞预警2026-10-30 发布INFO

RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a report, and they render that subject witho...

CVE-2026-105455

RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an inciden

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布INFO

RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted to break out of the link's address can...

CVE-2026-105454

RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.14.12, 0.15.0 up t...

CVE-2026-104615

A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12

来源摘录 · NVD

#cve #cwe-290

漏洞预警2026-10-30 发布HIGH

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimen...

CVE-2026-104067

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm plugi

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-30 发布HIGH

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data....

CVE-2026-104066

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader a

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-30 发布HIGH

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select ima...

CVE-2026-104065

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vulnerability in the importdrw Micrografx Dr

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-30 发布HIGH

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that allows attackers to trigger a heap overflow v...

CVE-2026-104064

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-30 发布MEDIUM

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data. Attacker...

CVE-2026-104063

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader an

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-30 发布HIGH

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory...

CVE-2026-104062

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and i

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-30 发布HIGH

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that uses unchecked PSD file values as lookup arr...

CVE-2026-104061

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-30 发布INFO

A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an...

CVE-2026-93327

A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versio

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-30 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This ...

CVE-2026-65444

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes Bl

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in...

CVE-2026-61739

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77,

来源摘录 · NVD

#cve #cwe-287 #cwe-862

漏洞预警2026-10-30 发布CRITICAL

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, `POST /api/scoutsuite/generate-gcp-report` in `backend/a...

CVE-2026-61738

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77,

来源摘录 · NVD

#cve #cwe-22 #cwe-434 #cwe-73

漏洞预警2026-10-30 发布CRITICAL

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret permits token forgery when a deployment has not replaced t...

CVE-2026-61737

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret p

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-321

漏洞预警2026-10-30 发布CRITICAL

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected deployments, the unauthenticated `/scoutsuite-report` `Static...

CVE-2026-61730

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected depl

来源摘录 · NVD

#cve #cwe-200 #cwe-306 #cwe-522 #cwe-552

漏洞预警2026-10-30 发布CRITICAL

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `verify_graylog_header` in `backend/app/active_response/...

CVE-2026-61729

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,

来源摘录 · NVD

#cve #cwe-306 #cwe-798

漏洞预警2026-10-30 发布CRITICAL

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snapshots preceding the respective 0.1.70 and 0.1.76 sink rep...

CVE-2026-61728

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snap

来源摘录 · NVD

#cve #cwe-79 #cwe-922

漏洞预警2026-10-30 发布HIGH

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `POST /api/agent_data_store/upload` in `backend/app/data...

CVE-2026-61708

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,

来源摘录 · NVD

#cve #cwe-284 #cwe-639 #cwe-862

漏洞预警2026-10-30 发布INFO

libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. Prior to 0.17.5, libass can overread and overwrite the gly...

CVE-2026-61627

libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. P

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-125 #cwe-787