#severity:high

共收录 5417 条相关情报。

← 返回所有主题
安全公告2026-10-14 发布INFO

A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows...

CVE-2026-110385

A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up...

CVE-2026-104995

The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Multiple Kasa devices contain an improper authentication vulnerability in the local device...

CVE-2026-108473

Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unaut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This...

CVE-2026-110359

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privilege

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows...

CVE-2026-88964

An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated serv

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

The Ignition Perspective module does not properly validate session privileges when determining...

CVE-2026-92817

The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a...

CVE-2026-84790

OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subje

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...

CVE-2026-95632

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate...

CVE-2026-77207

Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libres

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...

CVE-2026-95633

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE...

CVE-2026-94453

Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the conne

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for...

CVE-2026-77206

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a res

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that...

CVE-2026-95634

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...

CVE-2026-103297

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that...

CVE-2026-105902

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that...

CVE-2026-106627

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...

CVE-2026-103296

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...

CVE-2026-104345

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that...

CVE-2026-100139

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that...

CVE-2026-100137

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · GitHub Advisory