2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exp...

CVE-2026-91251

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions tha

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exp...

CVE-2026-91250

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions tha

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0...

CVE-2026-91243

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Lay

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions that are affected...

CVE-2026-91241

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics W

来源摘录 · NVD

漏洞预警2026-10-15 发布CRITICAL

Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, formatString() in src/server/utils/template.ts passes survey feedTemplate an...

CVE-2026-55240

Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, formatString() in s

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially ...

CVE-2026-42020

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X200

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially ...

CVE-2026-42019

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X200

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially...

CVE-2026-41223

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially c...

CVE-2026-41222

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s):

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP ...

CVE-2026-40627

An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A spec...

CVE-2026-40615

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (vers

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafte...

CVE-2026-33568

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTO

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A special...

CVE-2026-28763

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5....

CVE-2026-91341

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Conte

来源摘录 · NVD

漏洞预警2026-10-16 发布CRITICAL

Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers/<id>/exec does not enforce authentication on the WebSock...

CVE-2026-57169

Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers

来源摘录 · NVD

漏洞预警2026-10-22 发布CRITICAL

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a m...

CVE-2026-114575

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModu

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This m...

CVE-2026-114383

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the a...

CVE-2026-114268

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of

来源摘录 · NVD

漏洞预警2026-05-05 发布CRITICAL

Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to ...

CVE-2023-54344

Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attack

来源摘录 · NVD

漏洞预警2026-05-05 发布CRITICAL

Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface that allows unauthenticated attackers to execute arbitrary ...

CVE-2023-54342

Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface th

来源摘录 · NVD