#cwe-1188

共收录 133 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 ...

CVE-2026-77934

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentica...

CVE-2026-109437

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sand

历史摘要 · 未重新核验 · NVD

安全公告2026-10-14 发布INFO

holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway...

CVE-2026-110769

holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default...

CVE-2026-14765

Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchUR

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() acce...

CVE-2026-53709

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example s

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery

CVE-2026-53709

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example s

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed...

CVE-2026-89120

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The se

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library...

CVE-2026-89105

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from uninte

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, i...

CVE-2026-89120

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing una...

CVE-2026-89105

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from uninte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access the host filesystem because nsenter attaches without --ro...

CVE-2026-109569

sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged...

CVE-2026-78018

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privilege...

CVE-2026-78013

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource

历史摘要 · 未重新核验 · NVD

安全公告2026-10-07 发布INFO

Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

CVE-2026-105744

### Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine (`LatexBackendOptions

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into L...

CVE-2026-105744

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent c...

CVE-2026-103956

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remot

历史摘要 · 未重新核验 · NVD

安全公告2026-10-02 发布INFO

Missing authentication for critical function in Loom for AWS

CVE-2026-103956

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remot

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-02 发布INFO

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before ...

CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift pe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a res...

CVE-2026-85494

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects...

CVE-2026-94634

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerabilit

历史摘要 · 未重新核验 · NVD