2026-10-21 归档

今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-19 发布INFO

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. T...

CVE-2026-112360

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of

历史摘要 · 未重新核验 · NVD

#cve #cwe-912

漏洞预警2026-10-19 发布INFO

A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function get_img_from_url of the file ApiBillet...

CVE-2026-112358

A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability af

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-19 发布INFO

A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and poten...

CVE-2026-112261

A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-aft

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-19 发布INFO

A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a cr...

CVE-2026-112258

A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-19 发布INFO

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A c...

CVE-2026-112257

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte strid

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-10-19 发布INFO

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-re...

CVE-2026-105814

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request conta

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-19 发布INFO

The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a stack-allocated struct osdp_event. For...

CVE-2026-76788

The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Periph

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-19 发布INFO

The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe() (subsys/mgmt/updatehub/updatehub.c). The decoder...

CVE-2026-76787

The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff ca...

CVE-2026-112395

Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer w

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row...

CVE-2026-112394

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an inp

历史摘要 · 未重新核验 · NVD

#cve #cwe-126

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data throu...

CVE-2026-112393

Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The parser follows atta...

CVE-2026-112391

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame...

CVE-2026-112390

Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the fra

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-10-19 发布INFO

A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extract...

CVE-2026-112302

A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-19 发布INFO

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation o...

CVE-2026-112301

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Comm

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-10-19 发布INFO

A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/init.py. The manipulation...

CVE-2026-112300

A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionm

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

漏洞预警2026-10-19 发布INFO

A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditPro...

CVE-2026-112299

A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-19 发布INFO

Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a filehandle and the file_etag...

CVE-2026-111946

Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header.

历史摘要 · 未重新核验 · NVD

#cve #cwe-497

漏洞预警2026-10-19 发布INFO

Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit t...

CVE-2026-71170

Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileg

历史摘要 · 未重新核验 · NVD

#cve #cwe-427

漏洞预警2026-10-19 发布INFO

Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access ...

CVE-2026-71169

Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vu

历史摘要 · 未重新核验 · NVD

#cve #cwe-732