2026-10-07 归档

今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-06 发布INFO

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal s...

CVE-2026-104073

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged u

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-668

漏洞预警2026-10-06 发布INFO

Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could poten...

CVE-2026-103778

Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability.

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-10-06 发布INFO

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch th...

CVE-2026-103620

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-06 发布INFO

In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution pri...

CVE-2026-0198

In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-06 发布INFO

A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles used for open connect...

CVE-2026-88252

A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's availab

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-10-06 发布INFO

Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through ...

CVE-2026-66666

Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensiti

历史摘要 · 未重新核验 · NVD

#cve #cwe-201

漏洞预警2026-10-06 发布INFO

ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression can pass attacker-expanded runs to BitWrit...

CVE-2026-106117

ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffm

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-06 发布INFO

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates once per declared entry. When fewer t...

CVE-2026-106116

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-10-06 发布INFO

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip ca...

CVE-2026-106115

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPe

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-06 发布INFO

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before conf...

CVE-2026-106114

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-10-06 发布INFO

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image<HalfVector4> and applying HistogramEqualization ca...

CVE-2026-106113

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-06 发布INFO

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalcula...

CVE-2026-106112

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-06 发布INFO

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR bl...

CVE-2026-106111

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty Z

历史摘要 · 未重新核验 · NVD

#cve #cwe-226

漏洞预警2026-10-06 发布INFO

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. TiffCcittComp...

CVE-2026-106110

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized comp

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively removed the resolved build.distDir bef...

CVE-2026-106109

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/ap

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContex...

CVE-2026-106107

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/ap

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-116

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4 and @quasar/app-vite 3.3.0, renderSSRError() in uti...

CVE-2026-106106

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-497

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the ...

CVE-2026-106105

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR() passed an unbounded User-Agent request header to getMa...

CVE-2026-106104

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder ...

CVE-2026-106103

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1,

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73