2026-10-14 归档

今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-13 发布INFO

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 throug...

CVE-2026-108382

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-10-13 发布INFO

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 throug...

CVE-2026-108381

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-10-13 发布INFO

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 throug...

CVE-2026-108380

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-10-13 发布INFO

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 throug...

CVE-2026-108379

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-10-13 发布INFO

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 throug...

CVE-2026-108378

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-10-13 发布INFO

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 throug...

CVE-2026-108377

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-10-13 发布INFO

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.47.3 throug...

CVE-2026-108376

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-10-13 发布INFO

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 throug...

CVE-2026-108375

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-10-13 发布INFO

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token ...

CVE-2026-105445

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an au

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-10-13 发布INFO

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with...

CVE-2026-104085

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors t

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-13 发布INFO

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-94257. Reason: This candidate is a reservation duplicate of CVE-2026-94257. Notes: All CVE u...

CVE-2026-104011

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-94257. Reason: This candidate is a

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. Th...

CVE-2026-88838

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-10-13 发布INFO

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attack...

CVE-2026-88834

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence or

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

漏洞预警2026-10-13 发布INFO

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP...

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-10-13 发布INFO

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatc...

CVE-2026-85990

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation an

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-862

漏洞预警2026-10-13 发布INFO

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes...

CVE-2026-85733

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker ima

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-10-13 发布INFO

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as ...

CVE-2026-82416

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-488

漏洞预警2026-10-13 发布INFO

A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account registration is disabled (disableSign...

CVE-2026-69226

A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when s

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-13 发布INFO

Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authen...

CVE-2026-66057

Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitize

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-10-13 发布INFO

Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack ag...

CVE-2026-61642

Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow

历史摘要 · 未重新核验 · NVD

#cve #cwe-444