2026-10-18 归档

今日共收录 723 条安全情报,包含 0 个 CVE,397 篇安全通告,以及 78 篇研究论文。

← 返回归档列表
安全公告2026-10-18 发布INFO

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was...

CVE-2018-7862

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-18 发布INFO

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was...

CVE-2018-7865

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-18 发布INFO

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was...

CVE-2018-7864

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-18 发布INFO

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was...

CVE-2018-7861

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-18 发布INFO

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was...

CVE-2012-4410

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware...

CVE-2026-111934

Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmos

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2...

CVE-2026-111930

Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment...

CVE-2026-111923

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

A security flaw has been discovered in THU-MIG yoloe up to...

CVE-2026-111865

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the fu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling...

CVE-2026-111931

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated...

CVE-2026-111924

Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2...

CVE-2026-111932

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML inject

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner...

CVE-2026-111929

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow...

CVE-2026-111928

Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of coderd/rbac/po

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4...

CVE-2026-111927

Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostnam

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass...

CVE-2026-111910

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in attachment.php

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Admidio before 5.0.16 contains an information disclosure vulnerability that allows...

CVE-2026-111916

Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view rol

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every...

CVE-2026-111922

Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models...

CVE-2026-111920

Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_access.go), which res

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules...

CVE-2026-111914

Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php

历史摘要 · 未重新核验 · GitHub Advisory