#severity:high

共收录 5417 条相关情报。

← 返回所有主题
安全公告2026-10-09 发布INFO

Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied

CVE-2026-107810

### Summary An authenticated user who can create and restore a backup can craft a valid backup archive that causes the r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

pyLoad has an authentication bypass in API key validation (check_apikey cache)

## Summary The API-key cache in `check_apikey()` allows an attacker to authenticate with a **forged API key** as long a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

CVE-2026-55797

### Impact Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the...

CVE-2026-107909

A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers...

CVE-2026-7826

A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in Fal

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration...

CVE-2026-107914

Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when deliverin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in...

CVE-2026-107911

A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over...

CVE-2026-83947

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Exposure of sensitive information to an unauthorized actor in Azure API Center allows an...

CVE-2026-83943

Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial...

CVE-2026-84247

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming...

CVE-2026-105673

An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 55

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to imp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...

CVE-2026-84875

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service...

CVE-2026-105674

TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...

CVE-2026-84198

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the...

CVE-2026-105672

TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service...

CVE-2026-84230

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection...

CVE-2026-89091

A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive ext

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS ...

CVE-2026-84058

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...

CVE-2026-84246

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

历史摘要 · 未重新核验 · GitHub Advisory