#cwe-441

共收录 138 条相关情报。

← 返回所有主题
漏洞预警2026-08-31 发布INFO

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, the fix for CVE-2026-33407 (GHSA-hhjq-82f8-m6rc, "SSRF via HTTP Proxy Environment ...

CVE-2026-77348

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, the fix for CVE-2026-3340

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the ability to create HelmRelease custom resources (CRs), to byp...

CVE-2026-67567

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the abi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, the ADD_CALENDAR handler in defaultmodules/calendar/node_helper.js accepts an attacker-controlled ...

CVE-2026-63643

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, the ADD_CALENDAR handler in defaultmodule

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布INFO

Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypoint.ts accepts x_a...

CVE-2026-73424

Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/int

历史摘要 · 未重新核验 · NVD

安全公告2026-08-13 发布INFO

The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an...

CVE-2026-72640

The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets it manage

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-13 发布INFO

The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each referenc...

CVE-2026-72640

The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets it manage

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An authenticated tenant can exploit this vulnerability by manipulating ClusterClaim labe...

CVE-2026-73266

A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An authenticated tenant can exp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resou...

CVE-2026-72526

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-man

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant...

CVE-2026-70398

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerabil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys issued to tenants a...

CVE-2026-73079

Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0

历史摘要 · 未重新核验 · NVD

安全公告2026-08-10 发布INFO

A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create...

CVE-2026-16456

A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can ex

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-10 发布INFO

A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the `loadSecret` function. This ...

CVE-2026-16456

A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can ex

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

The OnCallNotificationActivity in the Datadog Android application is declared android:exported=...

CVE-2026-44964

The OnCallNotificationActivity in the Datadog Android application is declared android:exported="true" in AndroidManifest

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can laun...

CVE-2026-44964

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchemasCache resolves e...

CVE-2026-54663

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resol

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnect(true) is enabled...

CVE-2026-43910

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. Fro

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

CVE-2026-43910

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. Fro

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-24 发布INFO

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster...

CVE-2026-17107

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary...

CVE-2026-42933

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-22 发布INFO

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server...

CVE-2026-13062

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal

历史摘要 · 未重新核验 · NVD