2026-10-14 归档

今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-13 发布INFO

A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the compone...

CVE-2026-109404

A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown func

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-13 发布INFO

A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/c...

CVE-2026-109403

A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-13 发布INFO

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no p...

CVE-2026-94410

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-13 发布INFO

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake: from v1.3 before v1.4.

CVE-2026-89279

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-13 发布INFO

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an authentica...

CVE-2026-63316

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布INFO

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) ...

CVE-2026-109832

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-10-13 发布INFO

A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPServ...

CVE-2026-109402

A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file a

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the component API Tool Co...

CVE-2026-109190

A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/parser...

CVE-2026-109189

A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3Pars

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-13 发布INFO

A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/...

CVE-2026-109160

A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component environment_tarball Handler. ...

CVE-2026-109156

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlser

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-13 发布INFO

A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is ...

CVE-2026-109155

A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint...

CVE-2026-109153

A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versi...

CVE-2026-89208

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify...

CVE-2026-89206

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfor

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedu...

CVE-2026-89205

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfor

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management....

CVE-2026-89204

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restri

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to ...

CVE-2026-89203

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restri

历史摘要 · 未重新核验 · NVD

#cve #cwe-201

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests....

CVE-2026-89202

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfor

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names pr...

CVE-2026-89201

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

历史摘要 · 未重新核验 · NVD

#cve #cwe-89