#severity:medium

共收录 5624 条相关情报。

← 返回所有主题
安全公告2026-06-02 发布INFO

A vulnerability was detected in sayan365 student-management-system up to...

CVE-2026-10619

A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling...

CVE-2019-25723

Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows ex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Dräger Atlan A350 software versions 1.00 through 1.01 contains an improper input handling...

CVE-2021-4479

Dräger Atlan A350 software versions 1.00 through 1.01 contains an improper input handling vulnerability that allows atta

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects...

CVE-2026-10617

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function...

CVE-2026-10607

A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the...

CVE-2026-10608

A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyactio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control...

CVE-2026-40713

Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability. An unauthenti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the...

CVE-2026-49943

CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matchi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of...

CVE-2026-10606

A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedbac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and...

CVE-2026-9522

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names...

CVE-2026-7299

Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Improper access control in the permission validation component in Devolutions Server 2026.1.19...

CVE-2026-9590

Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an aut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0)....

CVE-2026-41918

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applicatio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Missing Authorization vulnerability in Sekander Badsha Crew HRM allows Exploiting Incorrectly...

CVE-2026-27351

Missing Authorization vulnerability in Sekander Badsha Crew HRM allows Exploiting Incorrectly Configured Access Control

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

CVE-2026-28116

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emilia Projects Pr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting...

CVE-2026-49782

Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Acce

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

The Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image...

CVE-2026-3722

The Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) plugin for WordPress

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B...

CVE-2026-3870

A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.1

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B...

CVE-2026-3871

A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B firmware versions through

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting...

CVE-2026-10100

The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fi

历史摘要 · 未重新核验 · GitHub Advisory