#severity:medium

共收录 5624 条相关情报。

← 返回所有主题
安全公告2026-05-10 发布INFO

A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is the function...

CVE-2026-8223

A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is the function pcf_sess_sbi_discover_a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects...

CVE-2026-8214

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue...

CVE-2026-8216

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This...

CVE-2026-8215

A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This vulnerability affects the fu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via...

CVE-2026-45181

Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), whi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project...

CVE-2026-45184

Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for...

CVE-2026-8198

The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to A

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the...

CVE-2026-8187

A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is...

CVE-2026-8185

A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is an unknown function of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

A vulnerability was detected in Open5GS up to 2.7.7. This affects the function...

CVE-2026-8186

A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces,...

CVE-2026-32683

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transm

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

There is an Access Control Vulnerability in some HikCentral Professional versions. This could...

CVE-2026-1749

There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without...

CVE-2025-15633

An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privile

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS...

CVE-2026-8209

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without...

CVE-2025-15634

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to vie

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT...

CVE-2026-6667

PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server...

CVE-2026-6666

A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery...

CVE-2026-7652

The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

Hono has CSS Declaration Injection via Style Object Values in JSX SSR

CVE-2026-44458

### Summary The JSX renderer escapes `style` attribute object values for HTML but not for CSS. Untrusted input in a `st

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-09 发布INFO

Vert.x has a DoS via unbounded server-side SNI SslContext cache growth

CVE-2026-6860

Potential unbounded server-side SNI `SslContext` cache growth in Vert.x TLS handling, with possible resource-exhaustion

历史摘要 · 未重新核验 · GitHub Advisory