2026-10-07 归档

今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-06 发布INFO

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks ...

CVE-2026-79811

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with ad

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high priv...

CVE-2026-79810

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that co

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated re...

CVE-2026-79809

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploi

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary cod...

CVE-2026-79808

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could a

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user ...

CVE-2026-79807

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow m

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A succ...

CVE-2026-79806

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and ...

CVE-2026-79803

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input ...

CVE-2026-79802

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation cou

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticate...

CVE-2026-79800

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successf

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) a...

CVE-2026-79799

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by ...

CVE-2026-79797

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Ma

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information.

CVE-2026-76749

A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain admini...

CVE-2026-76748

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated re

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condi...

CVE-2026-76741

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authent

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malicious container or local attacker could use a Container Run...

CVE-2026-76061

A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malici

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-10-06 发布INFO

Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate th...

CVE-2026-73278

Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-06 发布INFO

Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess independently resolves the hostname when co...

CVE-2026-70357

Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the G

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-06 发布INFO

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp() in twisted/mail/imap4.py translates the IMAP ast...

CVE-2026-106454

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardTo

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

漏洞预警2026-10-06 发布INFO

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength to trust the four-byte decompressed-length header before...

CVE-2026-106453

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-10-06 发布INFO

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validates that the compressedLen field in a legacy LZ4Block head...

CVE-2026-106452

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validat

历史摘要 · 未重新核验 · NVD

#cve #cwe-789