2026-10-29 归档

今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。

漏洞预警2026-10-28 发布HIGH

A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code ...

CVE-2026-103408

A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthentica

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-28 发布HIGH

An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an aut...

CVE-2026-103407

An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Sessi

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-28 发布MEDIUM

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router an...

CVE-2026-103405

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in t

来源摘录 · NVD

#cve #cwe-74

漏洞预警2026-10-28 发布HIGH

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session...

CVE-2026-103403

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessMan

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-28 发布HIGH

An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access...

CVE-2026-103402

An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Ses

来源摘录 · NVD

#cve #cwe-345

漏洞预警2026-10-28 发布HIGH

An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session S...

CVE-2026-103401

An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handle

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-28 发布MEDIUM

An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory contents or cause a s...

CVE-2026-103393

An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adj

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-28 发布MEDIUM

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause s...

CVE-2026-103392

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an att

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-28 发布MEDIUM

An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and pote...

CVE-2026-103391

An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router all

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-28 发布MEDIUM

The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.8. This is due to the plugin not properly...

CVE-2026-76058

The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-28 发布HIGH

YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/templat...

CVE-2026-59979

YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snaps

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-639 #cwe-862

漏洞预警2026-10-28 发布HIGH

identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `POST /v1/workspaces/:workspace_id/projects/:project_id/gi...

CVE-2026-59185

identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-639 #cwe-862

漏洞预警2026-10-21 发布MEDIUM

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UP...

CVE-2026-114056

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布MEDIUM

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character printf precision. A maliciou...

CVE-2026-114041

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-28 发布HIGH

OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated flow route parameters from `GET /api/flows/:id` and `DELE...

CVE-2026-59179

OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-22

漏洞预警2026-10-28 发布MEDIUM

Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the request body without checking its typ...

CVE-2026-55369

Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the e

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-287 #cwe-943

漏洞预警2026-10-28 发布INFO

When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an auth...

CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not p

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布INFO

OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.

CVE-2026-115402

OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) vi

来源摘录 · NVD

#cve #cwe-362 #cwe-672

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is 9.2. Difficult ...

CVE-2026-87386

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation).

来源摘录 · NVD

#cve #cwe-200

安全公告2026-10-28 发布INFO

【安全通告】PHP "php2shell" 远程代码执行漏洞风险通告（CVE-2026-109618, CVE-2026-109619）

CVE-2026-109618 · CVE-2026-109619

【安全通告】PHP "php2shell" 远程代码执行漏洞风险通告（CVE-2026-109618, CVE-2026-109619）

历史摘要 · 未重新核验 · 腾讯云安全公告

#advisory #cloud #tencent