2026-10-21 归档

今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines() and merges par...

CVE-2026-113715

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP handshake, using only LZ4 compression rather than en...

CVE-2026-107692

The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persi...

CVE-2026-97406

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Rejected reason: this CVE was issued in error.

CVE-2026-75997

Rejected reason: this CVE was issued in error.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Rejected reason: this CVE was issued in error.

CVE-2026-75751

Rejected reason: this CVE was issued in error.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Rejected reason: this CVE was issued in error.

CVE-2026-75747

Rejected reason: this CVE was issued in error.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Rejected reason: this CVE was issued in error.

CVE-2026-48279

Rejected reason: this CVE was issued in error.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Rejected reason: this CVE was issued in error.

CVE-2026-21356

Rejected reason: this CVE was issued in error.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Rejected reason: this CVE was issued in error.

CVE-2026-21270

Rejected reason: this CVE was issued in error.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Rejected reason: this CVE was issued in error.

CVE-2026-21266

Rejected reason: this CVE was issued in error.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting certificate creation...

CVE-2026-113810

A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The s...

CVE-2026-113808

A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package fil...

CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident creation form, allowing an authent...

CVE-2026-113712

Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.p...

CVE-2026-113643

A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-10-20 发布INFO

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (t...

CVE-2026-111767

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-862

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, import routes invoke bigUploadMiddlewa...

CVE-2026-113711

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the imp

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change endpoint verifies the current password but does not use the ...

CVE-2026-113710

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change end

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create...

CVE-2026-113671

ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI help

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the core page REST API reads full page documents with .permission(false) in getOne and in the...

CVE-2026-113670

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the core page REST API reads full pa

历史摘要 · 未重新核验 · NVD