#severity:high

共收录 5499 条相关情报。

← 返回所有主题
安全公告2026-06-21 发布INFO

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and...

CVE-2026-56396

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the assets...

CVE-2026-56394

Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the assets/icon endpoint where the ex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

Capgo before 12.128.2 contains an unauthenticated security definer RPC function...

CVE-2026-56242

Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_only that returns th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and <= 5.9.13 contain a remote code...

CVE-2026-56382

Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and <= 5.9.13 contain a remote code execution vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that...

CVE-2026-56251

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

Capgo before 12.128.2 contains an improper access control vulnerability in the public...

CVE-2026-56253

Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public...

CVE-2026-56239

Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_usage_overage SECURITY

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils...

CVE-2025-71348

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config funct

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and ...

CVE-2026-56229

Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit() in the...

CVE-2025-71351

picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit() in the __reduce__ method, allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce...

CVE-2025-71378

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attacker

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell...

CVE-2025-71357

picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by...

CVE-2026-12786

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown...

CVE-2026-12784

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the librar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an...

CVE-2026-12781

A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element...

CVE-2026-12782

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some...

CVE-2026-12779

A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability...

CVE-2026-12778

A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in...

CVE-2026-12780

A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-20 发布INFO

AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment...

CVE-2026-56341

AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authori

历史摘要 · 未重新核验 · GitHub Advisory