2026-10-06 归档

今日共收录 1258 条安全情报,包含 460 个 CVE,421 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-06 发布INFO

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run...

CVE-2026-105486

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/pro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function...

CVE-2026-105573

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-bo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an...

CVE-2026-105610

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the fil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder...

CVE-2026-104043

A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for...

CVE-2026-104041

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route...

CVE-2026-104380

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted...

CVE-2026-104037

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to...

CVE-2026-105472

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a...

CVE-2026-104044

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggabl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system...

CVE-2026-104039

A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. When configured to evaluate password expiration warnings before...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LD

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a...

CVE-2026-104042

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight...

CVE-2026-104033

A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protoco

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a...

CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory...

CVE-2026-104031

A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during succe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a...

CVE-2026-104035

A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Den

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential...

CVE-2026-104034

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder durin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map...

CVE-2026-104032

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the aut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows...

CVE-2026-82989

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard...

CVE-2026-82988

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote,

历史摘要 · 未重新核验 · GitHub Advisory