#cwe-20

共收录 1721 条相关情报。

漏洞预警2026-09-21 发布INFO

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, Joplin accepts synchronized resource metadat...

CVE-2026-49453

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-22

漏洞预警2026-09-21 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy HTTP RBAC accepts RFC-valid opaque hea...

CVE-2026-73552

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4,

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-21 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ext_authz filter assumes that a requ...

CVE-2026-73547

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4,

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-476

安全公告2026-09-21 发布INFO

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects...

CVE-2026-94093

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/l

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:low

安全公告2026-09-21 发布INFO

A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info...

CVE-2026-94092

A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file u

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:low

安全公告2026-09-21 发布INFO

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the...

CVE-2026-94091

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file ge

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:low

漏洞预警2026-09-20 发布MEDIUM

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/load_replay_buffer/VecNormalize.load of the file save_util...

CVE-2026-94093

CVE-2026-94093 涉及 DLR-RM 维护的强化学习库 stable-baselines3（影响 2.9.0 及之前版本）。该库的模型持久化工具文件 save_util.py 在 PPO.load、load_replay_buf

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-502

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing a manipulation of the argument path r...

CVE-2026-94092

A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file u

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-502

漏洞预警2026-09-20 发布INFO

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipul...

CVE-2026-94091

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file ge

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-502

安全公告2026-09-20 发布INFO

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog...

CVE-2026-92254

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driv

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:medium

漏洞预警2026-09-20 发布INFO

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows all...

CVE-2026-92254

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driv

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-306

漏洞预警2026-09-18 发布INFO

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image pr...

CVE-2026-81180

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Profess

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-09-18 发布INFO

SysReptor: Authenticated RCE by insecure image processing

CVE-2026-81180

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Profess

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20

漏洞预警2026-09-18 发布INFO

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update validation in internal/webhook/tenant/validation/forbidden_anno...

CVE-2026-61794

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update valida

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-09-18 发布INFO

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

CVE-2026-61794

### Summary A validation bug in `internal/webhook/tenant/validation/forbidden_annotations_regex.go` allows an invalid `F

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-20 #severity:medium

安全公告2026-09-18 发布INFO

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

CVE-2026-61794

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update valida

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20

漏洞预警2026-09-18 发布INFO

A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's HTTP-object conver...

CVE-2026-93568

A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTT

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-18 发布INFO

A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form...

CVE-2026-93567

A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly u

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-18 发布INFO

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances.

CVE-2026-25684

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-18 发布INFO

The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all versions up to, and including, 1.23.0 via the `my_profile_update()` function. This is ...

CVE-2026-12954

The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all versions up to, and including

历史摘要 · 未重新核验 · NVD

#cve #cwe-20