#severity:high

共收录 5371 条相关情报。

← 返回所有主题
安全公告2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-79643

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-79644

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-79645

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-06 发布INFO

The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the...

CVE-2026-18056

The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a...

CVE-2026-67281

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

RouterOS accepts a "related" btest connection before the corresponding primary session has...

CVE-2026-67277

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

In BPF instructions that load/store a value from/to a scratch memory register the register index...

CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal...

CVE-2026-86207

An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the...

CVE-2026-86192

SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys end

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the...

CVE-2026-86195

grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the InvitationsController where t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

WWBN AVideo generates passwords for external-login accounts using rand() instead of a...

CVE-2026-86187

WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header...

CVE-2026-86196

Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header in the forgot-password

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

grav-plugin-api before 1.0.20 fails to validate group-inherited super permissions in user...

CVE-2026-86193

grav-plugin-api before 1.0.20 fails to validate group-inherited super permissions in user-management guards, allowing no

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task...

CVE-2026-86177

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subus

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized...

CVE-2025-9049

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a mi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

Bilibili Desktop through 1.18.0 disables TLS certificate verification process-wide and executes...

CVE-2026-86185

Bilibili Desktop through 1.18.0 disables TLS certificate verification process-wide and executes unsigned remote JavaScri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and...

CVE-2026-86175

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authen

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler...

CVE-2026-86173

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unaut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path...

CVE-2026-86169

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_cod

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user...

CVE-2026-86114

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to creat

历史摘要 · 未重新核验 · GitHub Advisory