#cwe-20

共收录 1721 条相关情报。

← 返回所有主题
漏洞预警2026-09-29 发布INFO

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up atta...

CVE-2026-102600

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-eng

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

CVE-2026-102600

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-eng

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps.

CVE-2026-101266

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire ch

历史摘要 · 未重新核验 · NVD

安全公告2026-09-28 发布INFO

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55...

CVE-2026-13018

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an...

CVE-2026-101131

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-28 发布INFO

Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry (.desktop) and D-Bus Service (.service) files, instead of validat...

CVE-2026-97027

Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry (.deskto

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl() method is responsible for rejecting dangerous URL values in the href and x...

CVE-2026-100370

DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl() method is respons

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a c...

CVE-2026-13018

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. ...

CVE-2026-101131

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerability exists in the superfecta module due to unsafe inclus...

CVE-2026-54710

FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerabi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submi...

CVE-2026-12342

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the Id

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/...

CVE-2026-101079

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function i

历史摘要 · 未重新核验 · NVD

安全公告2026-09-28 发布INFO

agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision

CVE-2026-101079

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function i

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-28 发布INFO

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.

CVE-2026-12268

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT recor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.

CVE-2026-12267

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of the component Domain Handler....

CVE-2026-101015

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functional

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component W...

CVE-2026-100902

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknow

历史摘要 · 未重新核验 · NVD

安全公告2026-09-27 发布INFO

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. ...

CVE-2026-88771

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: b

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-27 发布INFO

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FI...

CVE-2026-88771

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: b

历史摘要 · 未重新核验 · NVD

安全公告2026-09-27 发布INFO

The account recovery (password reset) functionality in the vulnerability-lookup web application...

CVE-2026-101041

The account recovery (password reset) functionality in the vulnerability-lookup web application contains a time-of-check

历史摘要 · 未重新核验 · GitHub Advisory