#severity:medium

共收录 5506 条相关情报。

← 返回所有主题
安全公告2026-10-25 发布INFO

OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows...

CVE-2026-116185

OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read oth

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export...

CVE-2026-116182

phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches exter

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 -...

CVE-2026-116187

Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in...

CVE-2026-116188

rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory acco

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure...

CVE-2026-116161

Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuer

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows...

CVE-2026-116169

SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows users with edit permiss

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free...

CVE-2026-116157

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to...

CVE-2026-116170

SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of...

CVE-2026-116159

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not reject reserved internal...

CVE-2026-116164

Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not reject reserved internal field names in client obje

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the...

CVE-2026-116160

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because...

CVE-2026-116168

SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relie

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing...

CVE-2026-116156

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set pr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing...

CVE-2026-116154

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated mem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of...

CVE-2026-116155

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP profiles by various d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and...

CVE-2026-116143

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element...

CVE-2026-116052

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers...

CVE-2026-116142

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder...

CVE-2026-116151

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to release all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the...

CVE-2026-116148

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does

历史摘要 · 未重新核验 · GitHub Advisory