#severity:low

共收录 1585 条相关情报。

← 返回所有主题
安全公告2026-06-28 发布INFO

A security vulnerability has been detected in antlr ANTLR4 up to 4.13.2. Affected by this...

CVE-2026-13501

A security vulnerability has been detected in antlr ANTLR4 up to 4.13.2. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream...

CVE-2026-13502

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This...

CVE-2026-13499

A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown...

CVE-2026-13493

A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file ba

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an...

CVE-2026-13495

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is...

CVE-2026-13496

A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted...

CVE-2026-13497

A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted element is an unknown functi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the...

CVE-2026-13491

A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the function Application::GetIn

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the...

CVE-2026-13489

A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the function ParseMessage of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The...

CVE-2026-13484

A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unkn

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function...

CVE-2026-13483

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encrypt_credentials of the fil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function...

CVE-2026-13482

A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function username.encode of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-28 发布INFO

Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a...

CVE-2026-58057

Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparis

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

Statamic CMS's incorrect authorization lets view-only users submit Live Preview content reserved for editors

CVE-2026-54244

### Impact The Live Preview endpoint for existing entries and terms only checked view authorization, but it accepts and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

Authelia has an Edge Case Access Control Rule Mismatch

CVE-2026-48794

### Impact **CVSSv4 Baseline Score:** Low 2.4 **CVSSv4 Weighted Score:** Low 1.3 The full CVSSv4 Vector for this vuln

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles

CVE-2026-49358

### Summary `AbstractGenerator::$temporaryFiles` is a public array, and `removeTemporaryFiles()` — invoked from `__dest

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

Hackney has CRLF / header injection via unvalidated `domain` and `path` options

CVE-2026-47069

### Summary CRLF injection in `hackney_cookie:setcookie/3` (`src/hackney_cookie.erl`). The function validates `Name` an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy

CVE-2026-49262

### Summary The administrative proxy route (`cmsproxy`) in Aimeos Pagible CMS is vulnerable to a Server-Side Request For

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

Cargo can be coerced to share credentials between registries

CVE-2026-5222

The Rust Security Response Team was notified that Cargo incorrectly normalized the URLs of third-party registries using

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket...

CVE-2026-48936

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--

历史摘要 · 未重新核验 · GitHub Advisory