2026-10-14 归档

今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could h...

CVE-2026-16275

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowe...

CVE-2026-14814

GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before

历史摘要 · 未重新核验 · NVD

#cve #cwe-625

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could h...

CVE-2026-14552

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could ...

CVE-2026-14210

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and

历史摘要 · 未重新核验 · NVD

#cve #cwe-1220

漏洞预警2026-10-13 发布INFO

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/b...

CVE-2026-108956

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-13 发布INFO

A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the comp...

CVE-2026-108955

A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the fu

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-125

漏洞预警2026-10-13 发布INFO

A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-t...

CVE-2026-108954

A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySea

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-120

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_f...

CVE-2026-108948

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-913 #cwe-915

漏洞预警2026-10-13 发布INFO

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipulation...

CVE-2026-108947

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file t

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-502

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have...

CVE-2026-105458

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4

历史摘要 · 未重新核验 · NVD

#cve #cwe-807

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have...

CVE-2026-104661

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could h...

CVE-2026-103549

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could h...

CVE-2026-101168

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configur...

CVE-2026-100755

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-349

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could h...

CVE-2026-100104

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-13 发布INFO

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-pri...

CVE-2026-89124

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-13 发布INFO

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked b...

CVE-2026-89122

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated a

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-10-13 发布INFO

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileg...

CVE-2026-89121

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on assoc

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-13 发布INFO

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, i...

CVE-2026-89120

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The se

历史摘要 · 未重新核验 · NVD

#cve #cwe-1188

漏洞预警2026-10-13 发布INFO

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on...

CVE-2026-89118

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-criti

历史摘要 · 未重新核验 · NVD

#cve #cwe-552