MFSA 2026-108Security Vulnerabilities fixed in Firefox ESR 153.5
MFSA 2026-108Security Vulnerabilities fixed in Firefox ESR 153.5
2026-10-14 归档
今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。
← 返回归档列表MFSA 2026-107Security Vulnerabilities fixed in Firefox ESR 115.43
MFSA 2026-107Security Vulnerabilities fixed in Firefox ESR 115.43
MFSA 2026-106Security Vulnerabilities fixed in Firefox 158
MFSA 2026-106Security Vulnerabilities fixed in Firefox 158
Arbitrary file write in grpc phQueryMaster
CVSSv3 Score: 9.4 An Improper limitation of a pathname to a restricted directory ('path traversal') [CWE-22] i
Broken authorization
CVSSv3 Score: 3.4 A missing authorization vulnerability [CWE-862] in FortiSIEM GUI may allow an authenticated
HTML injection in WebUI
CVSSv3 Score: 4.9 An improper neutralization of script-related HTML tags in a web page in FortiManager and For
Improper access control and session management in the web management interface
CVSSv3 Score: 9.6 An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in Forti
Persistent Denial of Service in Admin Profile
CVSSv3 Score: 4.8 An Uncaught Exception vulnerability [CWE-248] in FortiSandbox may allow a privileged attacke
SQL command injection in webmail
CVSSv3 Score: 7.7 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vuln
arbitrary command execution in fgfmsd daemon
CVSSv3 Score: 5.3 An improper neutralization of special elements used in an OS command ('OS Command Injection'
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array...
CVE-2026-86573
Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Ser
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....
CVE-2026-110445
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers
Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. ...
CVE-2026-86607
Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. This issue affects Hitach
The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email'...
CVE-2026-103422
The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions u
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL...
CVE-2026-102251
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' pa
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array...
CVE-2026-82715
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....
CVE-2026-110444
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default...
CVE-2026-14765
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchUR