2026-10-28 归档

今日共收录 2009 条安全情报,包含 1141 个 CVE,471 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-27 发布INFO

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

CVE-2026-106077

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading t...

CVE-2026-106076

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected.

CVE-2026-105477

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-p...

CVE-2026-104349

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Library Manager after the library is imported, can trigger a St...

CVE-2026-102638

A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Librar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripti...

CVE-2026-102637

A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting (XSS) vulnerabilit...

CVE-2026-102636

A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to...

CVE-2025-64394

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond t...

CVE-2026-93866

An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administ...

CVE-2026-93865

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request...

CVE-2026-93857

A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to exec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to ...

CVE-2026-93434

An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with...

CVE-2026-92377

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authent...

CVE-2026-92376

Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring fo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component pr...

CVE-2026-92375

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to versio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15...

CVE-2026-92374

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged help

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitra...

CVE-2026-92372

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certif...

CVE-2026-90442

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with acces

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to h...

CVE-2026-82332

An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command ...

CVE-2026-117511

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function proce

历史摘要 · 未重新核验 · NVD