2026-10-13 归档

今日共收录 1460 条安全情报,包含 709 个 CVE,466 篇安全通告,以及 13 篇研究论文。

← 返回归档列表
漏洞预警2026-10-12 发布INFO

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifna...

CVE-2026-108914

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper authentication. Th...

CVE-2026-108907

A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evalu...

CVE-2026-9191

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup ...

CVE-2026-85956

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with deleg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function...

CVE-2026-85955

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote atta...

CVE-2026-85948

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations. A remote attacker wi...

CVE-2026-85947

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root w...

CVE-2026-109390

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_prefix...

CVE-2026-108896

A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/set

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MAC...

CVE-2026-108895

A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /go

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlan_se...

CVE-2026-108893

A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac Filte...

CVE-2026-108892

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment var...

CVE-2026-93582

The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an ex...

CVE-2026-78357

Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is d

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

京ICP证080047号[京ICP备08010314号-6]

京ICP证080047号[京ICP备08010314号-6]

历史摘要 · 未重新核验 · 360CERT

安全公告2026-10-13 发布INFO

京网文〔2020〕6051-1195号

京网文〔2020〕6051-1195号

历史摘要 · 未重新核验 · 360CERT

安全公告2026-10-13 发布INFO

(总)网出证(京)字第281号

(总)网出证(京)字第281号

历史摘要 · 未重新核验 · 360CERT

安全公告2026-10-13 发布INFO

京公网安备 11000002002063号

京公网安备 11000002002063号

历史摘要 · 未重新核验 · 360CERT

安全公告2026-10-13 发布INFO

浙公网安备 33010602009975号

浙公网安备 33010602009975号

历史摘要 · 未重新核验 · 阿里云安全公告

安全公告2026-10-13 发布INFO

Background Security Improvements

Background Security Improvements

历史摘要 · 未重新核验 · Apple Security Releases