#severity:high

共收录 5383 条相关情报。

← 返回所有主题
安全公告2026-09-02 发布INFO

claude-skill-antivirus fails to analyze executable files when scanning local skill directories,...

CVE-2026-84810

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md wh

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from...

CVE-2026-84809

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pyca

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories,...

CVE-2026-84811

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco...

CVE-2026-20281

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that ar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...

CVE-2026-20275

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco...

CVE-2026-20280

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineer

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...

CVE-2026-20276

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...

CVE-2026-20278

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...

CVE-2026-20277

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin...

CVE-2026-84673

Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configura

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker...

CVE-2026-84838

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary com

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants...

CVE-2026-84672

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions us

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing...

CVE-2026-84837

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers...

CVE-2026-84675

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build en

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that...

CVE-2026-84670

Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with...

CVE-2026-84669

A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity...

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file throug

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration...

CVE-2026-84667

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data bi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based

历史摘要 · 未重新核验 · GitHub Advisory