#severity:medium

共收录 5624 条相关情报。

← 返回所有主题
安全公告2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when...

CVE-2026-43505

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Be

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A weakness has been identified in SourceCodester Advanced School Management System 1.0. The...

CVE-2026-7545

A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unkno

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function...

CVE-2026-7536

A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function bsf_sess_add_by_ip_addres

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function...

CVE-2026-7519

A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/Uploa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an...

CVE-2026-7505

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the co

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5404

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Route Services can be leveraged to send app traffic to network destinations outside of an app's...

CVE-2026-22726

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA...

CVE-2026-40687

In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the...

CVE-2026-40684

In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malfor

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a...

CVE-2026-40685

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounter

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction...

CVE-2026-6542

IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an...

CVE-2026-7506

A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an unknown function of the fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes...

CVE-2025-14688

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i...

CVE-2026-2311

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes...

CVE-2026-1577

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on...

CVE-2026-3345

IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system. An attacker c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text...

CVE-2025-36335

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a lo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between...

CVE-2025-36180

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes...

CVE-2025-36122

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel...

CVE-2026-6539

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers

历史摘要 · 未重新核验 · GitHub Advisory