MFSA 2026-102Security Vulnerabilities fixed in Thunderbird 140.17
MFSA 2026-102Security Vulnerabilities fixed in Thunderbird 140.17
2026-10-09 归档
今日共收录 747 条安全情报，包含 0 个 CVE，359 篇安全通告，以及 100 篇研究论文。
← 返回归档列表MFSA 2026-101Security Vulnerabilities fixed in Thunderbird 157
MFSA 2026-101Security Vulnerabilities fixed in Thunderbird 157
MFSA 2026-104Security Vulnerabilities fixed in Firefox 157.0.1
MFSA 2026-104Security Vulnerabilities fixed in Firefox 157.0.1
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zha
TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states. The
Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration...
CVE-2026-107914
Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when deliverin
An unauthenticated user with network access to the Ops Manager web port can repeatedly request...
CVE-2026-87110
An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that
A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in...
CVE-2026-107911
A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 all
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src...
CVE-2026-7827
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decod
An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c)...
CVE-2026-107910
An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.
An authenticated Ops Manager organization member can retrieve another member's pending...
CVE-2026-87109
An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed thr
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group...
CVE-2026-107890
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation re
OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission...
CVE-2026-107885
OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cups
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add...
CVE-2026-107886
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces
Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client...
CVE-2026-97031
Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted
When a JavaScript template literal contains consecutive expressions, the context tracking state...
CVE-2026-94448
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset u
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over...
CVE-2026-83947
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
When parsing a Range header containing a large number of small ranges, FileServer(FS),...
CVE-2026-78667
When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) c