#severity:medium

共收录 5477 条相关情报。

← 返回所有主题
安全公告2026-09-22 发布INFO

Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service

CVE-2026-77561

### Summary Tinyauth's login rate-limit bookkeeping can enter a global lockdown mode when its in-memory login-attempt m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-22 发布INFO

Tinyauth: User enumeration attack by timing oracle

CVE-2026-77582

### Summary It's possible to enumerate users through a timing oracle. In other words: I can easily check if a username e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-22 发布INFO

KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub

CVE-2026-62370

## Summary KubeEdge CloudHub uses the viaduct packer to decode messages received from connected peers. The packer reads

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-22 发布INFO

OpenBao Skips Stricter Deny Policy for LIST operations

CVE-2026-63131

## Impact When a policy operator has written `capabilities = ["deny"]` on a path with a trailing wildcard but allowed a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-21 发布INFO

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function...

CVE-2026-94110

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function self_Tmp in the library

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-21 发布INFO

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the...

CVE-2026-94090

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the...

CVE-2026-94050

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of...

CVE-2026-94043

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability was identified in 03-lovepreetSingh MCP up to...

CVE-2026-94044

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function...

CVE-2026-94038

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the...

CVE-2026-94040

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderActi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function...

CVE-2026-94039

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /ap

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Improper link resolution before file access in the quarantine restoration process of WatchDog...

CVE-2026-92253

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Wind

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows...

CVE-2026-92252

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privilege

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog...

CVE-2026-92254

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driv

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an...

CVE-2026-94015

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local...

CVE-2026-94111

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this...

CVE-2026-93997

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function...

CVE-2026-94004

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_j

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A security flaw has been discovered in code-projects Internship Management System 1.0. This...

CVE-2026-93979

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of t

历史摘要 · 未重新核验 · GitHub Advisory