#severity:high

共收录 5499 条相关情报。

← 返回所有主题
安全公告2026-06-17 发布INFO

Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows...

CVE-2026-30803

Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.This

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials"...

CVE-2026-32652

Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. A low privileged att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers...

CVE-2026-30802

Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.This issue affects Connex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

picklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch function...

CVE-2026-53875

picklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch function that allows attackers to e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view...

CVE-2026-20190

A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing...

CVE-2026-53872

picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Dell PowerFlex Manager, version(s) [Versions], contain(s) a Missing Authentication for Critical...

CVE-2026-35065

Dell PowerFlex Manager, version(s) [Versions], contain(s) a Missing Authentication for Critical Function vulnerability.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Missing Authorization vulnerability in Nexi Payments Nexi XPay allows Exploiting Incorrectly...

CVE-2026-54810

Missing Authorization vulnerability in Nexi Payments Nexi XPay allows Exploiting Incorrectly Configured Access Control S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication...

CVE-2026-49502

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code...

CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control...

CVE-2026-35066

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list,...

CVE-2025-71322

PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypas

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS...

CVE-2026-54415

Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all pla

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection...

CVE-2026-11311

When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

A remote attacker can inject LDAP special characters into the Distinguished Name (DN)...

CVE-2026-49268

A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication...

CVE-2026-32804

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

An integer overflow in the mtar_next() function in src/microtar.c in rxi microtar 0.1.0 allows a...

CVE-2026-54417

An integer overflow in the mtar_next() function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to caus

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.

CVE-2026-54193

Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-54813

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Improper Control of Generation of Code ('Code Injection') vulnerability in Monetizemore Advanced...

CVE-2026-54816

Improper Control of Generation of Code ('Code Injection') vulnerability in Monetizemore Advanced Ads allows Remote Code

历史摘要 · 未重新核验 · GitHub Advisory