#severity:high

共收录 5373 条相关情报。

← 返回所有主题
安全公告2026-09-24 发布INFO

Microsoft Outlook Remote Code Execution Vulnerability

CVE-2026-70125

Microsoft Outlook Remote Code Execution Vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path...

CVE-2026-75887

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by man

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all...

CVE-2026-19125

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and includi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

The Import and export users and customers plugin for WordPress is vulnerable to Privilege...

CVE-2026-86583

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

elysia has Inefficient Algorithmic Complexity and Interpretation Conflict

CVE-2026-56669

Elysia v1.4.28 is vulnerable to denial-of-service attacks due to CPU exhaustion in the form data normalization code. El

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

ReactPress has SQL injection via dynamic column names in TypeORM query builders

CVE-2026-61685

## Summary ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query parameter

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...

CVE-2026-80425

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting...

CVE-2026-82369

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authentica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...

CVE-2026-80379

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...

CVE-2026-80412

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying...

CVE-2026-6935

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequatel

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a...

CVE-2026-75886

A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the Catalogd

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect...

CVE-2026-6794

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a...

CVE-2026-94183

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-96826

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Kh

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

A flaw was found in the Ansible Automation Platform automation controller. The external logging ...

CVE-2026-85475

A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) configuration

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting...

CVE-2026-84691

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log messa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

A flaw was found in the automation-controller input-validation guard...

CVE-2026-84714

A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function us

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential...

CVE-2026-84706

A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view...

CVE-2026-84683

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command,

历史摘要 · 未重新核验 · GitHub Advisory