2026-10-06 归档

今日共收录 1258 条安全情报,包含 460 个 CVE,421 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-06 发布INFO

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one. On HTTP/2 and HTTP/3 a WebSocket handshak...

CVE-2026-104380

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM) request when passkey authen...

CVE-2026-104044

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggabl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by sending a specially crafted req...

CVE-2026-104043

A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigge

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request containing a zero-length authen...

CVE-2026-104042

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because the negative...

CVE-2026-104041

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Micr...

CVE-2026-104040

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quot

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When handling Generic Security Services Application Prog...

CVE-2026-104039

A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory Access Protocol) environments, ...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LD

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of th...

CVE-2026-105472

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security Identifier (SID) extension. In deploy...

CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This ...

CVE-2026-104037

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort be...

CVE-2026-104036

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Denial of Service (DoS) by maintaining a persistent connecti...

CVE-2026-104035

A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Den

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder during Kerberos ticket-granting ticket (TGT) renewal, where a ...

CVE-2026-104034

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder durin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expiration v...

CVE-2026-104033

A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protoco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This t...

CVE-2026-104032

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client...

CVE-2026-104031

A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during succe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoi...

CVE-2026-82989

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK inst...

CVE-2026-82988

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts ...

CVE-2026-105785

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Jopli

历史摘要 · 未重新核验 · NVD