2026-10-15 归档

今日共收录 805 条安全情报,包含 0 个 CVE,398 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
威胁情报2026-10-14 发布INFO

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information le

历史摘要 · 未重新核验 · SecurityWeek

安全公告2026-10-15 发布INFO

A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an...

CVE-2026-76659

A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.

CVE-2026-76662

A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.

CVE-2026-76660

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS...

CVE-2026-110908

Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulner

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to...

CVE-2026-77931

MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS comman

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption...

CVE-2026-76663

A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP...

CVE-2026-110909

Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the cu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote ...

CVE-2026-76656

A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor...

CVE-2026-76066

IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.

CVE-2026-76661

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption

CVE-2026-73799

A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function...

CVE-2026-110810

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that...

CVE-2026-0993

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as...

CVE-2026-110904

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection...

CVE-2026-109430

Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser...

CVE-2026-110871

Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared...

CVE-2026-110873

Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in...

CVE-2026-110864

Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection...

CVE-2026-110869

Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUT

历史摘要 · 未重新核验 · GitHub Advisory