2026-10-03 归档

今日共收录 1361 条安全情报,包含 499 个 CVE,489 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59665

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59664

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59663

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59662

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59661

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59660

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59659

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affec...

CVE-2026-104403

Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Con

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API (like Apache DS) may consume 100% of a CPU core indefinitely when...

CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API (like Ap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supp...

CVE-2026-103880

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lea...

CVE-2026-103878

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended opera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server (or pre-TLS MITM) can answer a client's loadSchema() subschema s...

CVE-2026-103877

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server (or pre

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Stack Overflow vulnerability in Apache Directory LDAP API. Before binding, a client can send a deeply nested search filter that overflows the stack in the server's decoder. ...

CVE-2026-103552

Stack Overflow vulnerability in Apache Directory LDAP API. Before binding, a client can send a deeply nested search f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer (or a MITM) can send a small BER-encoded response causing a large mem...

CVE-2026-102731

Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer (or a MITM)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or ...

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerabilit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacke...

CVE-2026-91784

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: be...

CVE-2026-80464

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request F

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: be...

CVE-2026-80443

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chat...

CVE-2026-80337

Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Proper

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59671

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD