2026-10-28 归档

今日共收录 2009 条安全情报,包含 1141 个 CVE,471 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-27 发布INFO

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary ...

CVE-2026-93864

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-pat...

CVE-2026-93862

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster inte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-...

CVE-2026-90465

A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only (Device Mo...

CVE-2026-90464

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture loopback traffic t...

CVE-2026-115495

Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service conditi...

CVE-2026-113881

A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization ne...

CVE-2026-104381

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between ...

CVE-2026-103594

A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted...

CVE-2026-65119

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentica...

CVE-2026-41020

Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to cap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into...

CVE-2026-113644

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certifi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial...

CVE-2026-106174

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming payment notifications and, until the gateway is configured, ...

CVE-2026-103359

The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming pay

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation se...

CVE-2026-103332

The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the {aes_gcm, Bits} clause of b...

CVE-2026-65625

The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57196

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, the...

CVE-2026-57193

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57187

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, ins...

CVE-2026-57184

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 3.8.4.0 via the piereg_file_upload function. T...

CVE-2026-84999

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and

历史摘要 · 未重新核验 · NVD