#severity:high

共收录 5396 条相关情报。

← 返回所有主题
安全公告2026-10-27 发布INFO

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to...

CVE-2026-116843

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defini

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow...

CVE-2026-116837

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site...

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and...

CVE-2024-58400

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

A malicious actor with access to the adjacent network and under certain conditions could exploit...

CVE-2026-116836

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in...

CVE-2026-116816

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import...

CVE-2026-116827

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager:...

CVE-2026-116826

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(...

CVE-2026-116825

YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which...

CVE-2026-116821

YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level...

CVE-2026-116819

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that...

CVE-2026-116818

OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that...

CVE-2026-116811

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to...

CVE-2026-116808

OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort...

CVE-2026-116812

OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows pr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion...

CVE-2026-116813

OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to...

CVE-2026-116807

OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database...

CVE-2026-116814

OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email tem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in...

CVE-2026-116748

Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that expos

历史摘要 · 未重新核验 · GitHub Advisory