#cwe-697

共收录 62 条相关情报。

← 返回所有主题
漏洞预警2026-09-18 发布INFO

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnUpdate in internal/webhook/tenant/validation/hostname_rege...

CVE-2026-61795

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnU

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbidden_list.go sorts denied metadata keys case-...

CVE-2026-61672

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in p

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

CVE-2026-61795

### Summary A parameter order bug in `internal/webhook/tenant/validation/hostname_regex.go` causes the `hostnameRegexHa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

CVE-2026-61672

## Summary Capsule lets a cluster administrator forbid specific metadata keys that tenant owners must not place on thei

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

CVE-2026-61795

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnU

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

CVE-2026-61672

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in p

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-a...

CVE-2026-90977

The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Soft...

CVE-2026-20333

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /m...

CVE-2026-91997

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always eval

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission flag. DashboardsController::listTemplates() allowed a template wh...

CVE-2026-91851

Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission flag. Da

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0....

CVE-2026-90711

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs E

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks's HTTP request parser fails to reject URIs whose path has more seg...

CVE-2026-49846

libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks's HTTP re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check() ...

CVE-2026-64836

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error i

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement

CVE-2026-64836

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error i

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-08 发布INFO

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211_michael_mic_failure() function within sys/net80211/ieee80211_crypto_tkip.c that allo...

CVE-2026-56101

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211_michael_mic_failure() funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submittin...

CVE-2026-73309

XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-30 发布INFO

Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and pass a trimmed uniq...

CVE-2026-80227

Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriag

历史摘要 · 未重新核验 · NVD

安全公告2026-08-30 发布INFO

SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql

CVE-2026-80227

Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriag

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-20 发布INFO

Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage return or line feed in multipart input processed by mg_http_ne...

CVE-2026-73258

Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage retur

历史摘要 · 未重新核验 · NVD

安全公告2026-08-17 发布INFO

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is...

CVE-2026-75110

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=

历史摘要 · 未重新核验 · GitHub Advisory