#severity:high

共收录 5383 条相关情报。

← 返回所有主题
安全公告2026-09-04 发布INFO

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without...

CVE-2026-85447

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or vari

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket()...

CVE-2026-85445

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt:...

CVE-2026-85442

MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allowing u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and...

CVE-2026-85444

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored...

CVE-2026-85448

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors with

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that...

CVE-2026-85430

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing,...

CVE-2026-85432

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection...

CVE-2026-85431

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's...

CVE-2026-85439

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitD

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink:...

CVE-2026-85436

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body...

CVE-2026-85429

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it fr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges...

CVE-2026-70178

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown...

CVE-2026-85223

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown...

CVE-2026-85224

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate...

CVE-2026-65818

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio...

CVE-2026-62906

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker...

CVE-2026-69857

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55...

CVE-2026-18167

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user...

CVE-2026-64196

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user...

CVE-2026-64199

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

历史摘要 · 未重新核验 · GitHub Advisory