#severity:high

共收录 5378 条相关情报。

← 返回所有主题

安全公告2026-09-04 发布INFO

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs...

CVE-2026-85787

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before ve

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-184 #severity:high

安全公告2026-09-04 发布INFO

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request...

CVE-2026-82712

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:high

安全公告2026-09-04 发布INFO

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded...

CVE-2026-77847

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-798 #severity:high

安全公告2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...

CVE-2026-80118

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-73 #severity:high

安全公告2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...

CVE-2026-80114

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-321 #severity:high

安全公告2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...

CVE-2026-80112

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-732 #severity:high

安全公告2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...

CVE-2026-80119

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-73 #severity:high

安全公告2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...

CVE-2026-80116

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-782 #severity:high

安全公告2026-09-04 发布INFO

SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key a...

CVE-2026-72793

**CVE:** This vulnerability corresponds to [CVE-2026-72793](https://nvd.nist.gov/vuln/detail/CVE-2026-72793). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-522 #severity:high

安全公告2026-09-04 发布INFO

SiYuan: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers

CVE-2026-72795

**CVE:** This vulnerability corresponds to [CVE-2026-72795](https://nvd.nist.gov/vuln/detail/CVE-2026-72795). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-862 #severity:high

安全公告2026-09-04 发布INFO

SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf

CVE-2026-72794

**CVE:** This vulnerability corresponds to [CVE-2026-72794](https://nvd.nist.gov/vuln/detail/CVE-2026-72794). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-522 #severity:high

安全公告2026-09-04 发布INFO

SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns

CVE-2026-72798

**CVE:** This vulnerability corresponds to [CVE-2026-72798](https://nvd.nist.gov/vuln/detail/CVE-2026-72798). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-862 #severity:high

安全公告2026-09-04 发布INFO

SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path

CVE-2026-63735

An authenticated user scoped to one namespace/database could invoke a custom API (`DEFINE API`) belonging to a different

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rust #cwe-639 #cwe-862 #severity:high

安全公告2026-09-04 发布INFO

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the...

CVE-2026-82538

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-09-04 发布INFO

Improper neutralization of special elements used in a template engine in the CDK generator in...

CVE-2026-85654

Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mc

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1336 #severity:high

安全公告2026-09-04 发布INFO

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before...

CVE-2026-85656

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a lo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

安全公告2026-09-04 发布INFO

CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

CVE-2026-75911

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rust #npm #cwe-94 #severity:high

安全公告2026-09-04 发布INFO

CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)

CVE-2026-75858

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rust #npm #cwe-94 #cwe-862 #severity:high

安全公告2026-09-04 发布INFO

CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

CVE-2026-75912

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rust #npm #cwe-88 #cwe-200 #severity:high

安全公告2026-09-04 发布INFO

CodeWhale: js_execution leaks parent environment to model context via missing env scrub

CVE-2026-75915

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rust #npm #cwe-200 #cwe-526 #severity:high