#cwe-494

共收录 73 条相关情报。

← 返回所有主题
漏洞预警2026-10-01 发布INFO

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/valida...

CVE-2026-55251

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files

CVE-2026-55251

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip and setuptools seed wheels fetched for periodic updates or...

CVE-2026-102930

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An una...

CVE-2026-73595

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Downl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy_mini/daemon/app/routers/apps.py, has no authen...

CVE-2026-96455

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

CVE-2026-96455

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-21 发布INFO

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Desktop for Windows omits publisherName from pac...

CVE-2026-49450

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Ha...

CVE-2026-93534

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file ap

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

spatie Scotty Self Update SelfUpdater.php update code download

CVE-2026-93534

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file ap

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

Sublime Text for Windows through Build 4192 (Sublime Text 4) and Build 3207 (Sublime Text 3) contains a local privilege escalation vulnerability that allows unprivileged local a...

CVE-2026-7006

Sublime Text for Windows through Build 4192 (Sublime Text 4) and Build 3207 (Sublime Text 3) contains a local privilege

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access coul...

CVE-2026-63696

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerab

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentia...

CVE-2026-81052

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An una

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during device boot, in which...

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that...

CVE-2026-85427

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated at

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-03 发布INFO

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a cra...

CVE-2026-85427

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker...

CVE-2026-84664

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP catalog that allows a remote attacker to execute arbitrary code by compromising a th...

CVE-2026-82021

Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP catalog that allows a remot

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerabi...

CVE-2026-65081

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

CVE-2026-57910

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agen

历史摘要 · 未重新核验 · NVD