#severity:low

共收录 1585 条相关情报。

← 返回所有主题
安全公告2026-08-30 发布INFO

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is...

CVE-2026-82422

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this...

CVE-2026-82424

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown...

CVE-2026-82423

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-29 发布INFO

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects...

CVE-2026-82421

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-29 发布INFO

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an...

CVE-2026-82364

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-29 发布INFO

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict...

CVE-2026-81200

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order informa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-29 发布INFO

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check...

CVE-2026-77704

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the req

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-29 发布INFO

StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard...

CVE-2026-22056

StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are su

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-28 发布INFO

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

CVE-2026-55785

### Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers inste

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-28 发布INFO

PrivateBin has reflected JSON injection in backend responses via unescaped REQUEST_URI

CVE-2026-55891

## Vulnerability Details A reflected JSON injection allows an attacker to return arbitrary data in the JSON endpoints (

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-27 发布INFO

Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter

CVE-2026-42350

## Summary The Kargo UI reads a `redirectTo` query parameter on the `/login` and `/token-renew` routes and, following a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-27 发布INFO

cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions

CVE-2026-54713

### Impact For jobs with `shouldBeUnique = true` the queue plugin will generate a 'unique identifier' based on the job

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

OpenSTAManager has HTML Injection in modules/utenti/edit.php

CVE-2026-44701

### Summary An HTML Injection vulnerability exists in the user group creation functionality that allows an attacker to i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Wasmtime has a leak in WASIp1 `fd_renumber` implementation

CVE-2026-54786

### Impact Wasmtime's native implementation of WASIp1 suffers from a leak in the `fd_renumber` function where the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

kas Persistently Disables SSH Host Key Checking

CVE-2026-54548

### Summary kas persistently disables SSH host key checking for the invoking user when internal SSH key setup is trigge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-25 发布INFO

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this...

CVE-2026-79793

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-25 发布INFO

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function...

CVE-2026-79792

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp_download of the file sr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-25 发布INFO

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of...

CVE-2026-78435

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Contr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the...

CVE-2026-78430

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

netfoil vulnerable to improper handling of untrusted DoH response data

### Summary HTTPS RR data returned from the DoH server was not properly handled. Unverified APLN data (which could conta

历史摘要 · 未重新核验 · GitHub Advisory