2026-10-07 归档

今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-06 发布INFO

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy...

CVE-2026-76754

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to c

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memor...

CVE-2026-76753

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an una...

CVE-2026-76752

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass P

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker t...

CVE-2026-76751

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful explo

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated r...

CVE-2026-76750

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory conte...

CVE-2026-76747

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthe

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents an...

CVE-2026-76746

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary...

CVE-2026-76745

Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.

CVE-2026-76744

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthe

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication c...

CVE-2026-76743

A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticate

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized...

CVE-2026-76742

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allo

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST ob...

CVE-2026-106446

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compi

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-843

漏洞预警2026-10-06 发布INFO

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation m...

CVE-2026-102159

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality inten

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-06 发布INFO

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or...

CVE-2026-101155

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attac...

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory (

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no add...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the c

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-06 发布INFO

Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (C...

CVE-2026-106419

Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbit

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-06 发布INFO

Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C...

CVE-2026-106417

Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbit

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-10-06 发布INFO

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary co...

CVE-2026-106414

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveragi

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-10-06 发布INFO

Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page....

CVE-2026-106401

Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute ar

历史摘要 · 未重新核验 · NVD

#cve #cwe-787