2026-10-28 归档

今日共收录 2009 条安全情报,包含 1141 个 CVE,471 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-27 发布INFO

Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agent...

CVE-2026-92546

Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Auth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, de...

CVE-2026-65151

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful explo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information di...

CVE-2026-65120

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execu...

CVE-2026-47486

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information di...

CVE-2026-24269

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force. This issue affects Ontime: t...

CVE-2026-15586

Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows...

CVE-2026-116627

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Dev

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient ...

CVE-2026-114409

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local appl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain cond...

CVE-2026-107590

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting. This issue affects A...

CVE-2026-100164

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8...

CVE-2026-90732

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 thro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90731

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90730

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90729

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90728

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-56084

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path ...

CVE-2026-4337

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack a...

CVE-2026-41022

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could expl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing...

CVE-2026-41021

Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through C

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. ...

CVE-2026-13162

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbi

历史摘要 · 未重新核验 · NVD