#severity:medium

共收录 5482 条相关情报。

← 返回所有主题
安全公告2026-08-21 发布INFO

Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username

CVE-2026-63466

## Vulnerability Details **File**: `src/lib/addons/feature-event-formatter-md.ts` **Line**: 355 (in v8.0.1; `format()`

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request h...

CVE-2026-63004

## Summary Unleash's addon/integration subsystem lets an operator configure a webhook (and the Slack, Microsoft Teams,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex...

CVE-2026-27875

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autoca

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

The Brushfire platform's video content streaming application (https://online.brushfire.com)...

CVE-2026-75928

The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in req

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from...

CVE-2026-49114

In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_da

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows...

CVE-2026-15580

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery...

CVE-2026-76611

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux...

CVE-2026-77113

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to cre

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues...

CVE-2026-72860

The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP reque

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from...

CVE-2026-72846

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose...

CVE-2026-70105

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a networ

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian...

CVE-2026-77643

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and be

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of...

CVE-2026-18828

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory...

CVE-2026-19783

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in...

CVE-2026-19448

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decaps

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny...

CVE-2026-55015

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security...

CVE-2026-17424

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to impro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of...

CVE-2026-18822

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrol

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of...

CVE-2026-17195

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of...

CVE-2026-17120

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer

历史摘要 · 未重新核验 · GitHub Advisory