2026-10-23 归档

今日共收录 1236 条安全情报，包含 262 个 CVE，575 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-21 发布INFO

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This m...

CVE-2026-114383

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-121

漏洞预警2026-10-21 发布INFO

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The ma...

CVE-2026-114382

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-121

漏洞预警2026-10-21 发布INFO

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the...

CVE-2026-96639

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation c

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-10-21 发布INFO

Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verify_client STRICT policy. ...

CVE-2026-111815

Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate requir

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-10-21 发布INFO

Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one client certificate for a transaction configured to present ...

CVE-2026-111814

Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one cl

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-10-21 发布INFO

Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own credentials. This issue affects Apa...

CVE-2026-111812

Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers und

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-21 发布INFO

Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the shared proxy cache. This issue affects Apache Traffic S...

CVE-2026-111811

Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the s

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-21 发布INFO

Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encoding. This issue affects Apache Traffic Server: from 8.0.0 through ...

CVE-2026-111809

Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encoding. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-10-21 发布INFO

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the a...

CVE-2026-114268

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-120

漏洞预警2026-10-21 发布INFO

Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out bypassed the rejection...

CVE-2026-111816

Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Tr

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-10-21 发布INFO

Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsigned) configuration. This issue af...

CVE-2026-111813

Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

漏洞预警2026-10-21 发布INFO

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installati...

CVE-2026-111183

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

安全公告2026-10-23 发布INFO

京ICP证080047号[京ICP备08010314号-6]

历史摘要 · 未重新核验 · 360CERT

#360 #vulnerability #advisory

安全公告2026-10-23 发布INFO

京网文〔2020〕6051-1195号

历史摘要 · 未重新核验 · 360CERT

#360 #vulnerability #advisory

安全公告2026-10-23 发布INFO

（总）网出证（京）字第281号

历史摘要 · 未重新核验 · 360CERT

#360 #vulnerability #advisory

安全公告2026-10-23 发布INFO

京公网安备 11000002002063号

历史摘要 · 未重新核验 · 360CERT

#360 #vulnerability #advisory

安全公告2026-10-23 发布INFO

浙公网安备 33010602009975号

历史摘要 · 未重新核验 · 阿里云安全公告

#aliyun #cloud #advisory

安全公告2026-10-23 发布INFO

Background Security Improvements

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-10-23 发布INFO

Get help with security issues

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-10-23 发布INFO

submit your research

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos