2026-10-28 归档

今日共收录 2009 条安全情报,包含 1141 个 CVE,471 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-28 发布INFO

macOS Tahoe 26.7.2

macOS Tahoe 26.7.2

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-28 发布INFO

macOS Sequoia 15.8.2

macOS Sequoia 15.8.2

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-28 发布INFO

【腾讯云认证】从业者类别认证详情页升级公告

【腾讯云认证】从业者类别认证详情页升级公告

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-28 发布INFO

MFSA 2026-122Security Vulnerabilities fixed in Thunderbird 153.6

MFSA 2026-122Security Vulnerabilities fixed in Thunderbird 153.6

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-28 发布INFO

MFSA 2026-121Security Vulnerabilities fixed in Thunderbird 159

MFSA 2026-121Security Vulnerabilities fixed in Thunderbird 159

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-28 发布INFO

MFSA 2026-120Security Vulnerabilities fixed in Firefox ESR 153.6

MFSA 2026-120Security Vulnerabilities fixed in Firefox ESR 153.6

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-28 发布INFO

MFSA 2026-119Security Vulnerabilities fixed in Firefox ESR 115.44

MFSA 2026-119Security Vulnerabilities fixed in Firefox ESR 115.44

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-28 发布INFO

MFSA 2026-118Security Vulnerabilities fixed in Firefox 159

MFSA 2026-118Security Vulnerabilities fixed in Firefox 159

历史摘要 · 未重新核验 · Mozilla Security Advisories

威胁情报2026-10-28 发布INFO

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-28 发布INFO

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-10-27 发布INFO

This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon. The pos

历史摘要 · 未重新核验 · SecurityWeek

安全公告2026-10-28 发布INFO

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows...

CVE-2026-118378

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability...

CVE-2026-118377

mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthentica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.

CVE-2026-118384

GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA...

CVE-2026-118375

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to...

CVE-2026-118372

LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to inject HTTP headers by

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host...

CVE-2026-118373

LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards the OCSP UR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious...

CVE-2026-118374

LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exh

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

GROWI contains a missing authorization check vulnerability in its collaborative editing feature....

CVE-2026-115624

GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vuln

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows...

CVE-2026-117607

Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with

历史摘要 · 未重新核验 · GitHub Advisory