#severity:low

共收录 1585 条相关情报。

← 返回所有主题
安全公告2026-07-04 发布INFO

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is...

CVE-2026-14619

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionali

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with...

CVE-2026-12194

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the...

CVE-2026-14618

A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected...

CVE-2026-14617

A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function Gatewa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-03 发布INFO

A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function...

CVE-2026-14610

A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::Int

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-03 发布INFO

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive...

CVE-2026-14609

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This issue

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-03 发布INFO

A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI...

CVE-2026-14608

A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-03 发布INFO

A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the...

CVE-2026-14604

A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporte

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-03 发布INFO

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...

CVE-2026-46466

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Kiwi TCMS's /init-db/ page renders and responds to requests after first use

CVE-2026-49292

Kiwi TCMS provides the /init-db/ page as part of its setup mechanism for administrators who prefer a browser instead of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Kimai Favorite Timesheet Add and Remove Endpoints Allows Cross-User Bookmark Manipulation

### Summary Kimai 2.56.0 contains an authenticated improper authorization / IDOR vulnerability in the favorite timeshee

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding

CVE-2026-50268

### Summary Configuring `encrypt:rsa:algorithm=OAEP` does not enable OAEP encryption. Due to an incorrect BouncyCastle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

CVE-2026-48978

## Summary oras-go's `auth.Client` follows the `realm` URL from a registry's `WWW-Authenticate: Bearer` challenge witho

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory

### Summary `ArchiveUtils.untar(InputStream, Path)` and `ArchiveUtils.unzip(InputStream, Path)` in `land.oras:oras-java

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark()...

CVE-2026-56364

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark() function when parsing ma

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

CVE-2025-10995

### Summary A memory-safety vulnerability in Open Babel's bundled zipstream decompression code caused an out-of-bounds

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule

CVE-2025-10994

### Summary A memory-safety vulnerability in Open Babel's GAMESS output parser caused a use-after-free when reading a c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence

CVE-2026-3408

### Summary A memory-safety vulnerability in Open Babel's CDXML file format parser caused a NULL pointer dereference wh

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

CVE-2026-2705

### Summary A memory-safety vulnerability in Open Babel's MOL2 file format parser caused a NULL pointer dereference whe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString

CVE-2026-2704

> ### Summary > > A memory-safety vulnerability in Open Babel's CIF file format parser > allowed an out-of-bounds read w

历史摘要 · 未重新核验 · GitHub Advisory