2026-10-05 归档

今日共收录 815 条安全情报，包含 115 个 CVE，364 篇安全通告，以及 81 篇研究论文。

漏洞预警2026-10-05 发布INFO

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b...

CVE-2026-20527

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-10-05 发布INFO

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station...

CVE-2026-20526

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布INFO

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlle...

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-10-05 发布INFO

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. ...

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of p

历史摘要 · 未重新核验 · NVD

#cve #cwe-1285

漏洞预警2026-10-05 发布INFO

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges ne...

CVE-2026-20523

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布INFO

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges ne...

CVE-2026-20522

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布INFO

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2026-20521

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escala

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-10-05 发布INFO

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station...

CVE-2026-20520

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布INFO

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station...

CVE-2026-20519

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-05 发布INFO

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manip...

CVE-2026-105180

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/up

历史摘要 · 未重新核验 · NVD

#cve #cwe-913 #cwe-915

漏洞预警2026-10-05 发布INFO

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handle...

CVE-2026-105179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-310 #cwe-311

漏洞预警2026-10-05 发布INFO

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_sympt...

CVE-2026-105178

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the functi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-05 发布INFO

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Dru...

CVE-2026-105177

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown func

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-05 发布INFO

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argu...

CVE-2026-105176

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-05 发布INFO

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS error...

CVE-2026-105295

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or

历史摘要 · 未重新核验 · NVD

#cve #cwe-494

漏洞预警2026-10-05 发布INFO

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setCo...

CVE-2026-105294

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to w

历史摘要 · 未重新核验 · NVD

#cve #cwe-15

漏洞预警2026-10-05 发布INFO

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated t...

CVE-2026-105293

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Disc

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-05 发布INFO

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth ...

CVE-2026-105292

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject l

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-05 发布INFO

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-...

CVE-2026-105223

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-10-05 发布INFO

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add_student.php of the component Student...

CVE-2026-105175

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89