2026-10-03 归档

今日共收录 1361 条安全情报,包含 499 个 CVE,489 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-02 发布INFO

Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended t...

CVE-2026-94656

Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before...

CVE-2026-94655

Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommend...

CVE-2026-94654

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommend...

CVE-2026-85476

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) allows Exploiting Incorrectly Configur...

CVE-2026-85209

Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Manag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift  nodejs and D lang bindings. Both bindings' WebS...

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, rea...

CVE-2026-83663

Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffere

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thr...

CVE-2026-83632

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommen...

CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings. This issue af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the sta...

CVE-2026-66858

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recomme...

CVE-2026-66837

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Delphi bindings buffered transport. This issue affects Apache Thrift: before 0.25.0. Us...

CVE-2026-66331

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Delphi bindings buffered transport.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versio...

CVE-2026-66081

Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: bef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache Thrift: befor...

CVE-2026-66055

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and De

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++ bindings. This issue...

CVE-2026-66054

Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification) v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to ...

CVE-2026-63772

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended t...

CVE-2026-61374

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: through 2026...

CVE-2026-11795

Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footpr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanism.

CVE-2026-104733

User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via un

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/new_announcement.php of the compo...

CVE-2026-104612

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the fi

历史摘要 · 未重新核验 · NVD