2026-10-12 归档

今日共收录 1168 条安全情报,包含 403 个 CVE,452 篇安全通告,以及 67 篇研究论文。

← 返回归档列表
漏洞预警2026-10-11 发布INFO

SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that allows authenticated non-admin users to view other users...

CVE-2026-108712

SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

Plastic Labs Honcho through 3.3.0 contains an incorrect authorization vulnerability that allows peer- or session-scoped API key holders to read workspace data because get_or_cre...

CVE-2026-108711

Plastic Labs Honcho through 3.3.0 contains an incorrect authorization vulnerability that allows peer- or session-scoped

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /norni...

CVE-2026-108710

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-data

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation r...

CVE-2026-108584

A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads ...

CVE-2026-108578

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC...

CVE-2026-108577

A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secret Resolution. The ...

CVE-2026-108575

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracking/spend_managemen...

CVE-2026-108574

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY Fi...

CVE-2026-108573

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controllers/cas.go of the component Proxy Val...

CVE-2026-108572

A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file webmain/task/openapi/openkqjAction.php of the...

CVE-2026-108571

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs o...

CVE-2026-108570

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/Str...

CVE-2026-108569

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Repl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file system/controllers/billing/actions/paypal....

CVE-2026-108568

A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrd

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file system/fields/image.php of the component Image Handler. Perfo...

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file syst

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file templates/default/controllers/messages/index.tpl.php of the c...

CVE-2026-108566

A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file temp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such...

CVE-2026-108544

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument ...

CVE-2026-108543

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the com

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request H...

CVE-2026-108542

A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allowing any authenticated user, such as a Subscriber, to retr...

CVE-2026-97183

The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allow

历史摘要 · 未重新核验 · NVD