#CVE

共收录 58490 条相关情报。

漏洞预警2026-10-30 发布MEDIUM

Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attackers to crash the process by abusing HTTP/1 protocol upgrade...

CVE-2026-119574

Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attacker

来源摘录 · NVD

#cve #cwe-567

漏洞预警2026-10-30 发布LOW

Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-namespace check on the auth-tls-secret annotation whe...

CVE-2026-119573

Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cr

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-30 发布HIGH

Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX provider that silently disables mTLS configured via the aut...

CVE-2026-119572

Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX pr

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-30 发布LOW

Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates addressed by object ID to the installation named in the X-Parse-...

CVE-2026-119571

Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates address

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-30 发布LOW

Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to receive protected field values written by beforeSave trigge...

CVE-2026-119570

Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to re

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-30 发布MEDIUM

Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because user-controlled keys are expanded into objects without own-prope...

CVE-2026-119569

Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because user-co

来源摘录 · NVD

#cve #cwe-1321

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursive parsing to exhaust the Java thread stack and throw an u...

CVE-2026-119542

A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursiv

来源摘录 · NVD

#cve #cwe-674

漏洞预警2026-10-30 发布HIGH

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Ope...

CVE-2026-119528

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-30 发布INFO

CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cookieConf() rejects a cookie older than 300 seconds only whe...

CVE-2026-118987

CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cook

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布INFO

CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). The secret that signs session cookies is built from two cal...

CVE-2026-118986

CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). Th

来源摘录 · NVD

#cve #cwe-338

漏洞预警2026-10-30 发布INFO

Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.

CVE-2026-117350

Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布MEDIUM

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate ...

CVE-2026-117028

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::che

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-30 发布MEDIUM

A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany registers the main-world script message handler "tlsErrorPage" ...

CVE-2026-115683

A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany regist

来源摘录 · NVD

#cve #cwe-367

漏洞预警2026-10-30 发布MEDIUM

Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers to submit frontend forms without valid verification by om...

CVE-2026-112348

Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers

来源摘录 · NVD

#cve #cwe-693

漏洞预警2026-10-30 发布HIGH

Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API, where the PUT /wp-json/kirki/v1/pages/{page_id} route a...

CVE-2026-112347

Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network acc...

CVE-2026-111500

Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerabili

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-30 发布MEDIUM

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access...

CVE-2026-111499

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource v

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-30 发布MEDIUM

OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this ...

CVE-2026-111498

OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged a

来源摘录 · NVD

#cve #cwe-413

漏洞预警2026-10-30 发布LOW

Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the server fetches it to build an OpenGraph unfurl preview. `Res...

CVE-2026-100355

Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the ser

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-918

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileged attacker with adjacent network access could potentiall...

CVE-2026-91917

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileg

来源摘录 · NVD

#cve #cwe-20