#severity:high
共收录 5509 条相关情报。
← 返回所有主题 安全公告2026-06-01 发布INFO
CVE-2026-47418
## Summary
**Type:** Insecure Direct Object Reference. The project CRUD endpoints (`GET / PATCH / DELETE /workspaces/{w
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-01 发布INFO
CVE-2026-47423
### Summary
DOMPurify 3.4.4 allows `selectedcontent` by default, allowing a chain in which browsers "re-clone" an XSS pa
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-01 发布INFO
CVE-2026-48119
#### Summary
Nezha accepts service-monitor `TaskResult` messages from an authenticated agent based only on whether the
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-01 发布INFO
# AgenticMail MCP HTTP authorization bypass
## Summary
`@agenticmail/mcp` exposes a Streamable HTTP transport when sta
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-01 发布INFO
CVE-2026-10206
A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10191
A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilterSet of the file /bin
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10189
A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10192
A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_local_time_0 of the
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10187
A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasic
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10188
A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the file /bin/httpd. Execut
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10181
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /g
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10183
A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function formWlanSetup of the file /gofo
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-49490
OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling that allows authenticat
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-49489
OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10179
A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /go
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10164
A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the file /goform/formUSBFo
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10163
A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /gof
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10165
A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWanTcpipSetup of the f
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10162
A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function formSetPassword of the fil
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-31 发布INFO
CVE-2026-10161
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStatistic of the file /g
历史摘要 · 未重新核验 · GitHub Advisory