共收录 32 条相关情报。
← 返回所有主题CVE-2026-92209
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attack
CVE-2026-112041
A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability a
CVE-2026-13639
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-
CVE-2026-62646
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an
CVE-2026-27490
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being
CVE-2026-4937
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could all
CVE-2026-4936
IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71,
CVE-2026-19906
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the
CVE-2026-19748
A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC
CVE-2026-71851
crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in Crypt
CVE-2026-71851
### Summary `CryptoJS.lib.WordArray.random()` in affected versions is not a cryptographically secure random number gene
CVE-2026-71851
crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in Crypt
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with
CVE-2025-15629
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communicati
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with
CVE-2025-15629
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communicati
CVE-2026-4932
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physica
CVE-2026-4932
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physica
CVE-2026-11403
A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to
CVE-2026-13199
EEPROM firmware on Raspberry Pi 5 and Compute Module 5 devices produced non-random KASLR and RNG seed values. This resul