2026-10-14 归档

今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-13 发布INFO

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy treats the NO_PROXY CIDR form as a textual hostname suffix in...

CVE-2026-101899

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy trea

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-10-13 发布INFO

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Alert/MsgType parameter in the errorHandler....

CVE-2024-34326

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via t

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId coo...

CVE-2024-34324

An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a c

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.

CVE-2024-34321

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via t

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.

CVE-2024-34320

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoin

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Up...

CVE-2026-97334

The network messaging layer contained improper handling of highly compressed data affecting service availability. Softw

历史摘要 · 未重新核验 · NVD

#cve #cwe-409

漏洞预警2026-10-13 发布INFO

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command C...

CVE-2026-97333

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved mai

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-10-13 发布INFO

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c

CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in lib

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini...

CVE-2026-95124

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service

CVE-2026-95122

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-10-13 发布INFO

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized...

CVE-2026-95121

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() com...

CVE-2026-95117

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser

CVE-2026-95115

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via t

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service

CVE-2026-95114

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-13 发布INFO

SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing a...

CVE-2026-77375

SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malf

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-10-13 发布INFO

MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installatio...

CVE-2026-77100

MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to r

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-10-13 发布INFO

CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.

CVE-2026-77099

CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenanc

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-13 发布INFO

CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.

CVE-2026-77096

CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved m

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, inclu...

CVE-2026-77095

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maint

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-13 发布INFO

CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved mainte...

CVE-2026-77094

CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenan

历史摘要 · 未重新核验 · NVD

#cve