2026-10-05 归档

今日共收录 815 条安全情报,包含 115 个 CVE,364 篇安全通告,以及 81 篇研究论文。

← 返回归档列表
漏洞预警2026-10-05 发布INFO

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Ma...

CVE-2026-105174

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the com...

CVE-2026-105173

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanres

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation...

CVE-2026-105172

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected ...

CVE-2026-105171

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknow...

CVE-2026-105170

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an ...

CVE-2026-105169

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unkno...

CVE-2026-105168

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is p...

CVE-2026-105222

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/g...

CVE-2026-105221

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers ca...

CVE-2026-105220

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup fro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element ...

CVE-2026-105167

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is th...

CVE-2026-105166

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_secret of the file src/handler.py of the component AssumeRo...

CVE-2026-105165

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation cau...

CVE-2026-105164

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of the component Imag...

CVE-2026-105163

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping rege...

CVE-2026-105219

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider APIs. ...

CVE-2026-105218

gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to capture the worker token. Man-in...

CVE-2026-105217

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS helper sets Insecure...

CVE-2026-105216

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to imperso

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can le...

CVE-2026-105161

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the compo

历史摘要 · 未重新核验 · NVD