2026-10-21 归档

今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-20 发布INFO

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allo...

CVE-2026-101632

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability al...

CVE-2026-101631

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera...

CVE-2026-101534

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that ar

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. D...

CVE-2026-101533

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). S

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. E...

CVE-2026-101532

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). S

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. E...

CVE-2026-101519

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). S

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.9. Easily exploitable vulne...

CVE-2026-101468

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. E...

CVE-2026-101466

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). S

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request inc...

CVE-2026-113866

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service ov

历史摘要 · 未重新核验 · NVD

#cve #cwe-523

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes package-index downloads directly into the reusable wheel/house ...

CVE-2026-113714

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes packag

历史摘要 · 未重新核验 · NVD

#cve #cwe-354

漏洞预警2026-10-20 发布INFO

A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.

CVE-2026-111088

A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-20 发布INFO

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2026-100134

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-20 发布INFO

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose ...

CVE-2026-100132

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-20 发布INFO

Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authenticated users to read and modify other users' tags by su...

CVE-2026-113597

Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authe

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-20 发布INFO

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.

CVE-2026-43854

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials f

历史摘要 · 未重新核验 · NVD

#cve #cwe-311

漏洞预警2026-10-20 发布INFO

Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to ret...

CVE-2026-75753

Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send speci

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-20 发布INFO

Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an ...

CVE-2026-17518

Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrup

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-10-20 发布INFO

Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to the upstream without rem...

CVE-2026-105299

Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstrea

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-10-20 发布INFO

IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perfor...

CVE-2026-8355

IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authe

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-19 发布INFO

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when t...

CVE-2026-77684

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT comma

历史摘要 · 未重新核验 · NVD

#cve #cwe-401