#severity:high
共收录 5417 条相关情报。
← 返回所有主题 安全公告2026-10-09 发布INFO
CVE-2026-107810
### Summary
An authenticated user who can create and restore a backup can craft a valid backup archive that causes the r
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
## Summary
The API-key cache in `check_apikey()` allows an attacker to authenticate with a **forged API key** as long a
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-55797
### Impact
Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a p
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-107909
A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/b
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-7826
A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in Fal
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-107914
Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when deliverin
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-107911
A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 all
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-83947
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-83943
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclo
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-84247
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-105673
An
unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the
RTSP streaming service on TCP port 55
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-84209
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to imp
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-84875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-105674
TP-Link Tapo
C325WB V2 generates the pre-shared key used by its local media streaming
service with a time-seeded pseudo-
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-84198
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-105672
TP-Link Tapo
C325WB V2 contains an unauthenticated authorization bypass vulnerability in the
HTTPS JSON API dispatcher o
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-84230
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition r
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with
`ansible-galaxy collection install`, the archive ext
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-84058
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PR
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-84246
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe
历史摘要 · 未重新核验 · GitHub Advisory