#severity:high

共收录 5513 条相关情报。

← 返回所有主题
安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path...

CVE-2026-24209

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer...

CVE-2026-24210

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could...

CVE-2025-33255

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserial

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an...

CVE-2026-24206

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A succes

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker...

CVE-2026-24213

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-boun

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all...

CVE-2026-7467

The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and includin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions...

CVE-2026-6456

The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system...

CVE-2026-43619

Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is...

CVE-2026-3985

The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on...

CVE-2026-8370

Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is...

CVE-2026-8073

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file del

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had...

CVE-2026-27173

JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kube

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command...

CVE-2026-41470

LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows at

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

@angular/platform-server: SSRF via Hostname Hijacking

CVE-2026-46417

### Impact A Server-Side Request Forgery (SSRF) vulnerability exists in `@angular/platform-server`. The issue stems fro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

Caddy Defender trusted proxy client IP bypass

CVE-2026-46415

### Impact Caddy Defender used `r.RemoteAddr` when evaluating whether a request should be blocked. `RemoteAddr` is the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

FileBrowser Quantum: unauthenticated user share share info

CVE-2026-46410

### Impact Some sensitive info -- such as source and path can get exposed. ### Patches Update to the latest version ##

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

CamoFox MCP: Unauthenticated HTTP MCP browser-control surface

# Unauthenticated HTTP MCP browser-control surface in `camofox-mcp` ## Summary `camofox-mcp` exposed a Streamable HTTP

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

SQLFluff: Uncontrolled Resource Consumption in SQLFluff Parser

CVE-2026-46374

### Impact In deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a ma

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

SQLFluff: Recursive Stack Overflow in Parser

CVE-2026-46373

### Impact In deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a ma

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

CVE-2026-46372

## Resolution SillyTavern 1.18.0 added a generic server-side request filter (Private Request Whitelisting). Since we ex

历史摘要 · 未重新核验 · GitHub Advisory