2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2023-06-09 发布MEDIUM

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the templates function in versions up to, and i...

CVE-2023-2085

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability

来源摘录 · NVD

漏洞预警2023-02-01 发布MEDIUM

Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.

CVE-2023-0606

Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.

来源摘录 · NVD

漏洞预警2026-09-25 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc_named_node_up() on empty publication list User-space applications can bind a l...

CVE-2026-98098

In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc_named_node_up() on emp

来源摘录 · NVD

漏洞预警2026-09-25 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is passed in a fixed length ...

CVE-2026-98097

In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE

来源摘录 · NVD

漏洞预警2024-01-25 发布HIGH

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to c...

CVE-2023-52356

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadR

来源摘录 · NVD

漏洞预警2026-09-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6_srh_rcv() runs with skb->data at the Se...

CVE-2026-98096

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and

来源摘录 · NVD

漏洞预警2026-09-25 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a D...

CVE-2026-98113

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can

来源摘录 · NVD

漏洞预警2026-09-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is s...

CVE-2026-98112

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events

来源摘录 · NVD

漏洞预警2026-09-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate version TLV value lengths btintel_parse_version_tlv() verifies that a complete...

CVE-2026-98111

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate version TLV value leng

来源摘录 · NVD

漏洞预警2026-09-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound firmware ID by TLV length The firmware ID is treated as a NUL-terminated string e...

CVE-2026-98110

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound firmware ID by TLV length

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-83500

Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a sec

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.

CVE-2026-78459

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings when implying SEAL_WRITE When SEAL_EXEC is added, SEAL_WRITE is implied to m...

CVE-2026-63952

In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings when implying SEAL_W

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv_frame reads conn->sk under iso_conn_lock but releases th...

CVE-2026-63946

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-85339

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85341

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85342

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-85343

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to eleva

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83510

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevat

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85352

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD