2026-10-28 归档

今日共收录 2009 条安全情报,包含 1141 个 CVE,471 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-27 发布INFO

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr00t of the file dexbotic/model/gr00tsonic/gr00tsonic_arch....

CVE-2026-117510

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persistor._decompress of the file rasa_nlu/persistor.py of the component Model Persi...

CVE-2026-117509

A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persistor._decompress of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Direct...

CVE-2026-112710

A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who contr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory ser...

CVE-2026-112709

A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a mal...

CVE-2026-111585

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and R

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with lo...

CVE-2026-111584

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to ver

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Manag...

CVE-2026-111583

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.8

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileg...

CVE-2026-111582

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interfa...

CVE-2026-111107

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response che...

CVE-2026-109823

An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit ...

CVE-2026-107672

A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Rejected reason: This CVE has been rejected by Upstream, as they failed to create a meaningful exploit

CVE-2026-107458

Rejected reason: This CVE has been rejected by Upstream, as they failed to create a meaningful exploit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's publi...

CVE-2026-104189

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log ...

CVE-2026-103593

A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who ca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE)...

CVE-2026-78845

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light B

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profile...

CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race conditio...

CVE-2026-117507

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file extras/push-notificati...

CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipula...

CVE-2026-117505

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payloa...

CVE-2026-105987

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an auth

历史摘要 · 未重新核验 · NVD