#severity:medium

共收录 5559 条相关情报。

← 返回所有主题
安全公告2026-07-12 发布INFO

A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to...

CVE-2026-15491

A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. This affects

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function...

CVE-2026-15486

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C of the file /goform/

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function...

CVE-2026-15488

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to...

CVE-2026-15489

A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of...

CVE-2026-15487

A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/syste

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function...

CVE-2026-15485

A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub_43F2C4 of the file /gofor

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown...

CVE-2026-15482

A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file /az

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function...

CVE-2026-15479

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption...

CVE-2026-61861

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory alloca

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify...

CVE-2026-56372

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

PraisonAI before 4.6.78 fails to validate file path references in custom command templates,...

CVE-2026-60088

PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation...

CVE-2026-61465

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed op

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null...

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing...

CVE-2026-61428

PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attacke

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting...

CVE-2026-56763

Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting specially crafted form field na

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and...

CVE-2026-61858

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to mis

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid...

CVE-2026-56240

Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Cap-go before 12.128.2 contains an information disclosure vulnerability in the public...

CVE-2026-56296

Cap-go before 12.128.2 contains an information disclosure vulnerability in the public.transfer_app RPC function that ret

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure...

CVE-2026-10865

The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization...

CVE-2026-12994

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions u

历史摘要 · 未重新核验 · GitHub Advisory