Solaris Third Party Bulletin - October 2026
Solaris Third Party Bulletin - October 2026
2026-10-24 归档
今日共收录 814 条安全情报，包含 0 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表【对象存储】关于 COS 不再支持配置重定向回源规则及调整同步回源、异步回源“3xx 跟随”策略的通知
【对象存储】关于 COS 不再支持配置重定向回源规则及调整同步回源、异步回源“3xx 跟随”策略的通知
【TDSQL-C MySQL 版】关于任务管理接口调整的公告
【TDSQL-C MySQL 版】关于任务管理接口调整的公告
【大模型服务平台 TokenHub】关于 Hy-Image-3.0&Seedream-Image-v5.0-lite 模型下线的通知
【大模型服务平台 TokenHub】关于 Hy-Image-3.0&Seedream-Image-v5.0-lite 模型下线的通知
Chrome Beta for Desktop Update
The Beta channel has been updated to 157.0.8103.15 for Windows, Mac and Linux.A partial list of changes is available in
Early Stable Update for Desktop
The Stable channel has been updated to 157.0.8103.15/.16 for Windows , Mac will be coming shortly as part of our early
Chrome Dev for Desktop Update
The Dev channel has been updated to 158.0.8117.2 for Windows, Mac and Linux.A partial list of changes is available in th
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root...
CVE-2026-115929
MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root cer
The app/process-api-response-headers action accepts fake Craft API response headers from any...
CVE-2026-115935
The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-108793
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Craft CMS allows any authenticated control panel user to submit an element-search condition whose...
CVE-2026-115938
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is ev
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-110814
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never...
CVE-2026-115937
The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-108537
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the...
CVE-2026-115801
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::
filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name
CVE-2026-112937
`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) remove their private `.filelock-*` link
filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
CVE-2026-112913
On Windows, `ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) connect SQLite to the lock d
virtualenv: Temporary app-data can leave dangling seed package links
CVE-2026-113713
## Summary The app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when