2026-10-11 归档

今日共收录 1127 条安全情报,包含 372 个 CVE,412 篇安全通告,以及 88 篇研究论文。

← 返回归档列表
安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement...

CVE-2026-108679

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiCo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment...

CVE-2026-108670

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsCo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords...

CVE-2026-108672

JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGeneration

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-104841

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108667

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler...

CVE-2026-108666

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler of AiragPromptsControl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108665

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit handler that a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108668

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin ha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api...

CVE-2026-108648

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108656

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTen

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108659

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController...

CVE-2026-108652

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar handler t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108658

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo ha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController...

CVE-2026-108655

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById handler that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108664

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId...

CVE-2026-108651

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiContr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108647

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...

CVE-2026-108661

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer te

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...

CVE-2026-108660

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tena

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108657

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that

历史摘要 · 未重新核验 · GitHub Advisory