2026-10-10 归档

今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-09 发布INFO

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Co...

CVE-2026-107819

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-297

漏洞预警2026-10-09 发布INFO

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld...

CVE-2026-107818

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · NVD

#cve #cwe-15

漏洞预警2026-10-09 发布INFO

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that import...

CVE-2026-107817

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-09 发布INFO

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a...

CVE-2026-107816

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-09 发布INFO

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the `/web/<path:filename>` route in `src/pyload/webui/app/blueprints/app_blueprint....

CVE-2026-75597

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the `/web/` route in `src/

历史摘要 · 未重新核验 · NVD

#cve #cwe-209 #cwe-306

漏洞预警2026-10-09 发布INFO

EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This...

CVE-2026-75347

EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the Et

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-09 发布INFO

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to comman...

CVE-2026-55797

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-09 发布INFO

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the API `rpc` function in `api_blueprint.py` handles `multipart/form-data` uploads ...

CVE-2026-48484

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the API `rpc` function in

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-400

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Store...

CVE-2026-42695

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flo

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop clien...

CVE-2026-108160

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-494

漏洞预警2026-10-09 发布INFO

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing...

CVE-2026-108159

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted...

CVE-2026-108158

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-09 发布INFO

Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automat...

CVE-2026-108157

Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthent

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-09 发布INFO

LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a ski...

CVE-2026-108156

LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC h

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-10-09 发布INFO

A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved de...

CVE-2026-108119

A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsa

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-10-09 发布INFO

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing ...

CVE-2026-108093

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without en

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-10-09 发布INFO

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used ...

CVE-2026-107815

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-09 发布INFO

A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force...

CVE-2025-61560

A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows at

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-09 发布INFO

Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wik...

CVE-2016-20098

Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the r

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: fro...

CVE-2026-90983

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-603