2026-10-23 归档

今日共收录 1236 条安全情报,包含 262 个 CVE,575 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-23 发布INFO

A vulnerability was identified in gedelumbung HospitalManagement up to...

CVE-2026-115535

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The aff

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A security flaw has been discovered in gedelumbung HospitalManagement up to...

CVE-2026-115536

A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler...

CVE-2026-115486

A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer addres

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly...

CVE-2026-115484

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen()...

CVE-2026-115485

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data wi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

Authentication tokens issued by the E3's web management interface on login are given an...

CVE-2026-96616

Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete...

CVE-2026-110491

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operatio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A vulnerability was determined in gedelumbung HospitalManagement up to...

CVE-2026-115534

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacte

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and...

CVE-2026-110825

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON...

CVE-2026-92450

The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HM

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

The ONVIF device service on the E3 responds to certain informational requests without requiring...

CVE-2026-111100

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A vulnerability exists in the the time zone parameter and does not properly validate user input,...

CVE-2026-105265

A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an auth

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an...

CVE-2026-111594

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated...

CVE-2026-115449

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to...

CVE-2026-115221

A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image...

CVE-2026-115424

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the applicati

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate...

CVE-2026-108456

Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a networ

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Ghidra before 12.2 contains a resource allocation without limits vulnerability in...

CVE-2026-115398

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileS

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

No description provided

CVE-2026-95716

No description provided

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c...

CVE-2026-115504

CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-contr

历史摘要 · 未重新核验 · GitHub Advisory