#severity:medium

共收录 5534 条相关情报。

← 返回所有主题
安全公告2026-10-06 发布INFO

Vyper: Call stack corruption when passing complex type containing non-base type members as argument

### Impact When we pass a multi-dimensional array (like `[[1, 2], [3, 4]]`) as an argument to internal/external function

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

Vyper: Return inside for loop more than 1 level deep

# VVE-2020-0002 Earlier today, we received a responsible disclosure of a potential issue from @michwill (developer of @c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.

CVE-2026-32582

Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

Customer Insecure Direct Object References (IDOR) in Faktur Pro for WooCommerce <= 3.2.1 versions.

CVE-2026-32576

Customer Insecure Direct Object References (IDOR) in Faktur Pro for WooCommerce <= 3.2.1 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this...

CVE-2026-105707

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an...

CVE-2026-105704

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.

CVE-2026-39599

Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

CVE-2026-97300

Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown...

CVE-2026-105571

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run...

CVE-2026-105486

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/pro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names...

CVE-2026-104040

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quot

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder...

CVE-2026-104043

A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for...

CVE-2026-104041

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted...

CVE-2026-104037

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a...

CVE-2026-104044

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggabl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system...

CVE-2026-104039

A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. When configured to evaluate password expiration warnings before...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LD

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a...

CVE-2026-104042

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the...

CVE-2026-104036

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight...

CVE-2026-104033

A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protoco

历史摘要 · 未重新核验 · GitHub Advisory