2026-10-14 归档

今日共收录 1875 条安全情报,包含 867 个 CVE,609 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for cus...

CVE-2026-89200

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific d...

CVE-2026-89199

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to...

CVE-2026-89198

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification c...

CVE-2026-89197

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during t...

CVE-2026-89196

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwo...

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affect

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames receiv...

CVE-2026-85114

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affect

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC3...

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This could allow an atta...

CVE-2026-63357

Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could ...

CVE-2026-63356

Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an a...

CVE-2026-63355

Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to ...

CVE-2026-63352

Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page. ...

CVE-2026-63351

Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). ...

CVE-2026-59241

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from t...

CVE-2026-109854

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder 1:/user_upload/ instead of the config...

CVE-2026-109162

Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the def

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_file/_recv_pushd of the component SCP Receive Handler. The ...

CVE-2026-109152

A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memor...

CVE-2026-109149

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads...

CVE-2026-109144

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE ...

CVE-2026-102076

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver

历史摘要 · 未重新核验 · NVD