2026-10-18 归档

今日共收录 723 条安全情报,包含 0 个 CVE,397 篇安全通告,以及 78 篇研究论文。

← 返回归档列表
安全公告2026-10-18 发布INFO

Linux 内核提权 CVE-2026-31431(copy-fail)

CVE-2026-31431

Linux 内核提权 CVE-2026-31431(copy-fail)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-10-18 发布INFO

Alert for CVE-2026-35273

CVE-2026-35273

Alert for CVE-2026-35273

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-10-17 发布INFO

CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)

CVE-2026-0307

CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-10-17 发布INFO

util-linux mount hook_owner TOCTOU allows local privilege escalation

CVE-2026-53612

util-linux mount hook_owner TOCTOU allows local privilege escalation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

util-linux mount target TOCTOU allows local privilege escalation

CVE-2026-53613

util-linux mount target TOCTOU allows local privilege escalation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Squid Request Smuggling in HTTP Transfer-Encoding

CVE-2026-61642

Squid Request Smuggling in HTTP Transfer-Encoding

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

CVE-2026-67418

RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string

CVE-2026-110816

qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX Map directive and Regex matching vulnerability

CVE-2026-93479

NGINX Map directive and Regex matching vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_ssl_module vulnerability

CVE-2026-97629

NGINX ngx_http_ssl_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_js_module vulnerability

CVE-2026-101025

NGINX ngx_http_js_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_js_module vulnerability

CVE-2026-101019

NGINX ngx_http_js_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_v3_module vulnerability

CVE-2026-95101

NGINX ngx_http_v3_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_core_module vulnerability

CVE-2026-15176

NGINX ngx_http_core_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_core_module vulnerability

CVE-2026-97205

NGINX ngx_http_core_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Openssh: openssh: sftp can write outside the destination directory from a server-supplied path

CVE-2026-110923

Openssh: openssh: sftp can write outside the destination directory from a server-supplied path

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components

CVE-2026-95117

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

HTTP/2 upload Use-After-Free

CVE-2026-92392

HTTP/2 upload Use-After-Free

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

CVE-2026-94603

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()

CVE-2026-95124

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via

历史摘要 · 未重新核验 · Microsoft MSRC