2026-10-16 归档

今日共收录 833 条安全情报,包含 0 个 CVE,434 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
威胁情报2026-10-15 发布INFO

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to t

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-15 发布INFO

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root pri

历史摘要 · 未重新核验 · SecurityWeek

安全公告2026-10-16 发布INFO

Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL...

CVE-2026-111389

Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user...

CVE-2026-111388

Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip allowlist for non-ses

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows...

CVE-2026-111386

Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool...

CVE-2026-111385

Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.downloa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows...

CVE-2026-111387

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file...

CVE-2026-111384

Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager WebSocket endpoint be

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in...

CVE-2026-111382

FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in...

CVE-2026-111381

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows...

CVE-2026-111383

Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open unb

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in...

CVE-2026-111379

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in...

CVE-2026-111378

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in...

CVE-2026-111377

FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows...

CVE-2026-111376

FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

This vulnerability allows remote attackers to disclose sensitive information on affected...

CVE-2026-105227

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam...

CVE-2026-111374

FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL...

CVE-2026-111375

FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows mal

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

A weakness has been identified in Ultralytics FastSAM up to...

CVE-2026-111237

A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

This vulnerability allows remote attackers to disclose sensitive information on affected...

CVE-2026-105228

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

历史摘要 · 未重新核验 · GitHub Advisory