2026-10-14 归档

今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the component AIT Parser. S...

CVE-2026-109827

A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-787

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipu...

CVE-2026-109620

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-13 发布INFO

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. ...

CVE-2026-109607

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/a

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component ...

CVE-2026-109606

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-13 发布INFO

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24....

CVE-2026-104250

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, suc

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-116

漏洞预警2026-10-13 发布INFO

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evalu...

CVE-2026-104126

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts,

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-10-13 发布INFO

Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2Adapter._fetch by copying the original RequestOptions.hea...

CVE-2026-103030

Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-10-13 发布INFO

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation st...

CVE-2026-96297

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area af

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-13 发布INFO

Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that...

CVE-2026-88836

Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is inten

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid L2CAP configuration-option processin...

CVE-2026-81507

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-13 发布INFO

For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and blocked b...

CVE-2026-79611

For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect which wasn't accou...

CVE-2026-79610

XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 ->

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involves copying 64-bit PV guest page table entries from guest-...

CVE-2026-79609

XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involv

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional wa...

CVE-2026-79608

The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations o

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when readi...

CVE-2026-79607

During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes m

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointe...

CVE-2026-69150

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-bet

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-13 发布INFO

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow wit...

CVE-2026-55376

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-94 #cwe-693

漏洞预警2026-10-13 发布INFO

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths an...

CVE-2026-54700

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protoco

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-789

漏洞预警2026-10-13 发布INFO

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, ac...

CVE-2026-54697

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readL

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-789

漏洞预警2026-10-13 发布INFO

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in oauthlib/oauth2/rfc6749/grant_types/authoriza...

CVE-2026-49265

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKC

历史摘要 · 未重新核验 · NVD

#cve #cwe-208