共收录 37 条相关情报。
← 返回所有主题CVE-2026-10756
TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access s
CVE-2026-110909
Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the cu
CVE-2026-70212
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized atta
CVE-2026-86345
A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection w
CVE-2026-86345
A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection w
CVE-2026-92173
Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent i
CVE-2026-92172
Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent includi
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer
CVE-2026-101891
An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticate
CVE-2026-82932
mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, includin
CVE-2026-96454
Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings fro
CVE-2026-96454
Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings fro
CVE-2026-78501
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business
CVE-2026-81871
### Summary The OTLP log gRPC exporter loads TLS settings from environment variables but does not apply them when creat
CVE-2026-81871
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlplogg
CVE-2026-90461
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is conf
CVE-2026-90461
OpenStack Ironic 是一个用于裸金属节点部署和管理的服务。CVE-2026-90461 指出，在 Ironic 38.0.0 及之前版本中，当 Image Service（镜像服务）配置为使用 HTTP(S) Basic Au
CVE-2025-71390
SurrealDB offers http functions that can access external network endpoints. A typical, albeit [not recommended ](https:/
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized