#severity:high

共收录 5441 条相关情报。

← 返回所有主题
安全公告2026-07-06 发布INFO

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected:   before 3.0...

CVE-2026-43825

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected:   before 3.0.0-M4 (libsvm document c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre...

CVE-2026-40140

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-05 发布INFO

AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit...

CVE-2026-59510

AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit 14c618fce4d1df02358717

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-05 发布INFO

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute...

CVE-2026-6509

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Priv

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-05 发布INFO

Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM...

CVE-2026-12250

Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-05 发布INFO

Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in...

CVE-2026-9085

Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-05 发布INFO

A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an...

CVE-2026-14721

A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to...

CVE-2026-14637

A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard...

CVE-2026-14534

Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass...

CVE-2026-14535

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls A

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low...

CVE-2026-12196

HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users...

CVE-2026-12195

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger,...

CVE-2026-12252

In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, Stanford

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when...

CVE-2025-71375

picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for mal

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

picklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils...

CVE-2025-71345

picklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils.bottleneck.__main__.run_autograd

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads,...

CVE-2025-71367

picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attackers to b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile...

CVE-2025-71366

picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data...

CVE-2025-71369

picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basich

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle...

CVE-2025-71372

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a...

CVE-2026-54424

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Pri

历史摘要 · 未重新核验 · GitHub Advisory