#severity:medium

共收录 5624 条相关情报。

← 返回所有主题
安全公告2026-05-01 发布INFO

A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to...

CVE-2026-7590

A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to 69bc71874ce40050ef45fde5a435855f18af3373. The af

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A weakness has been identified in itsourcecode Courier Management System 1.0. This affects an...

CVE-2026-7592

A weakness has been identified in itsourcecode Courier Management System 1.0. This affects an unknown function of the fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function...

CVE-2026-7594

A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function image_to_3d_async of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability was determined in ghantakiran splunk-mcp-integration up to...

CVE-2026-7589

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Imp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65...

CVE-2026-26461

A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an...

CVE-2026-35233

An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function...

CVE-2026-7588

A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function get_style_guide/get_best_pract

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90....

CVE-2025-69606

Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP...

CVE-2026-42481

Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers...

CVE-2026-37504

Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers/Server/UniProxyControlle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25...

CVE-2026-23866

Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the...

CVE-2026-42475

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the joinOn function in BuildHe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `data` array to the...

CVE-2026-42474

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `data` array to the data function in BuildHe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin...

CVE-2026-37505

SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin/UserController.php, the sort para

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in...

CVE-2026-42480

A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could...

CVE-2026-23863

An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Cross-Site Scripting (XSS) in V2Board thru 1.7.4. The custom_html field in theme configuration is...

CVE-2026-37503

Cross-Site Scripting (XSS) in V2Board thru 1.7.4. The custom_html field in theme configuration is rendered using Blade u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial...

CVE-2026-43507

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial...

CVE-2026-43506

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when...

CVE-2026-43504

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Be

历史摘要 · 未重新核验 · GitHub Advisory