共收录 231 条相关情报。
← 返回所有主题CVE-2026-102282
adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the
CVE-2026-102282
adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the
CVE-2026-105165
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_se
CVE-2026-105165
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_se
CVE-2026-59944
## Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change
CVE-2026-104854
Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix do
CVE-2026-104854
Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix do
CVE-2026-92941
Summary vm2 3.11.6 exposes the host `tls` module to a `NodeVM` when that builtin is explicitly allowed. Although the mo
CVE-2026-94204
The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowin
CVE-2026-102282
## Summary adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via `fs.chmodS
CVE-2026-84414
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due t
CVE-2026-73598
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignm
CVE-2026-15952
Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600).
CVE-2026-82164
Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resourc
CVE-2026-12957
### Summary Language Servers for AWS (the aws/language-servers project) provide the underlying language-server runtime t
CVE-2026-68490
Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other acc
CVE-2026-68490
Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other acc
CVE-2026-95627
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can
CVE-2026-91800
A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient val
CVE-2026-91798
A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure per