2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2026-10-28 发布INFO

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into per...

CVE-2026-67079

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application withi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resou...

CVE-2026-67077

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the ap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and d...

CVE-2026-67073

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints.

CVE-2026-21830

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdf...

CVE-2026-118040

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticate...

CVE-2026-118039

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated ...

CVE-2026-118038

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, unchecked loop condition and inefficient regular express...

CVE-2026-118037

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocati...

CVE-2026-118036

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algorithmic complexity and infinite loop vulnerabilities in...

CVE-2026-118035

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16

CVE-2026-102799

Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Joomla Extension - icagenda.com - Stored XSS via url-type event Custom Field in iCagenda 3.2.1 to 4.0.16

CVE-2026-102790

Joomla Extension - icagenda.com - Stored XSS via url-type event Custom Field in iCagenda 3.2.1 to 4.0.16

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVE-2026-87879

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVE-2026-87101

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.

CVE-2026-87100

Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVE-2026-87099

Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVE-2026-87098

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Prote

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVE-2026-87097

Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acron

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Rejected reason: Reserved in error; never associated with a vulnerability.

CVE-2026-117858

Rejected reason: Reserved in error; never associated with a vulnerability.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Rejected reason: Reserved in error; never associated with a vulnerability.

CVE-2026-117857

Rejected reason: Reserved in error; never associated with a vulnerability.

历史摘要 · 未重新核验 · NVD