2026-10-07 归档

今日共收录 1979 条安全情报,包含 1214 个 CVE,387 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-07 发布INFO

MFSA 2026-103Security Vulnerabilities fixed in Thunderbird 153.4

MFSA 2026-103Security Vulnerabilities fixed in Thunderbird 153.4

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-07 发布INFO

MFSA 2026-102Security Vulnerabilities fixed in Thunderbird 140.17

MFSA 2026-102Security Vulnerabilities fixed in Thunderbird 140.17

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-07 发布INFO

MFSA 2026-101Security Vulnerabilities fixed in Thunderbird 157

MFSA 2026-101Security Vulnerabilities fixed in Thunderbird 157

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-06 发布INFO

Long Term Support (LTS) channel for ChromeOS - Major update from 144-> 150

The Long Term Support Candidate LTC-150 has been promoted to ChromeOS LTS-150 and is rolling out to most ChromeOS device

历史摘要 · 未重新核验 · Google Chrome Releases

安全公告2026-10-06 发布INFO

Extended Stable Update for Desktop

 The Extended Stable channel has been updated to 152.0.7977.158 for Windows and Mac which will roll out over the coming

历史摘要 · 未重新核验 · Google Chrome Releases

安全公告2026-10-07 发布INFO

MFSA 2026-104Security Vulnerabilities fixed in Firefox 157.0.1

MFSA 2026-104Security Vulnerabilities fixed in Firefox 157.0.1

历史摘要 · 未重新核验 · Mozilla Security Advisories

威胁情报2026-10-07 发布INFO

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-07 发布INFO

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-06 发布INFO

Cybersecurity M&A Roundup: 39 Deals Announced in September 2026

Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybers

历史摘要 · 未重新核验 · SecurityWeek

安全公告2026-10-07 发布INFO

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute...

CVE-2026-97673

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

In affected versions of Octopus Server, an authenticated user with permission to modify roles...

CVE-2026-102478

In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protectio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a...

CVE-2026-106061

A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only...

CVE-2026-81535

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel open

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

A flaw was found in Candlepin. The central authorization filter incorrectly grants access when...

CVE-2026-106471

A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Veri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated...

CVE-2026-105324

An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1...

CVE-2026-83742

Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows pla

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows...

CVE-2026-83540

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute...

CVE-2026-93443

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute...

CVE-2026-97674

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain...

CVE-2026-93677

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to

历史摘要 · 未重新核验 · GitHub Advisory