#severity:high

共收录 5513 条相关情报。

← 返回所有主题
安全公告2026-04-28 发布INFO

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the...

CVE-2026-7218

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_vali

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the...

CVE-2026-7204

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setPptpServerCfg

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the...

CVE-2026-7203

A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setUrlFilterR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function...

CVE-2026-7202

A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWiFiWpsStart of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight...

CVE-2026-20766

An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A command injection vulnerability exists in the web server of specific firmware versions of...

CVE-2026-32649

A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows...

CVE-2026-41371

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway ca

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A local attacker on the same host as the application may be able to take control of the directory...

CVE-2026-40973

A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows...

CVE-2026-41370

OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq...

CVE-2026-41368

OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec...

CVE-2026-41369

OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload...

CVE-2026-41364

OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

An attacker on the same network as the remote application may be able to utilize a timing attack...

CVE-2026-40972

An attacker on the same network as the remote application may be able to utilize a timing attack to discover information

历史摘要 · 未重新核验 · GitHub Advisory