2026-10-29 归档

今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。

漏洞预警2026-10-27 发布HIGH

Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C...

CVE-2026-118311

Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi

来源摘录 · NVD

#cve #cwe-119

漏洞预警2026-10-27 发布HIGH

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro...

CVE-2026-118307

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitra

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-27 发布HIGH

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pa...

CVE-2026-118304

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execut

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-10-23 发布MEDIUM

Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_i...

CVE-2026-115725

Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access oth

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-23 发布LOW

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of the f...

CVE-2026-115535

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The aff

来源摘录 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-22 发布MEDIUM

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounde...

CVE-2026-115508

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server

来源摘录 · NVD

#cve #cwe-1333

漏洞预警2026-10-22 发布HIGH

CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string ...

CVE-2026-115504

CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-contr

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-23 发布HIGH

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated...

CVE-2026-115484

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-22 发布MEDIUM

crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored ...

CVE-2026-115400

crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access

来源摘录 · NVD

#cve #cwe-312

漏洞预警2026-10-22 发布MEDIUM

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compressi...

CVE-2026-115396

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIcon

来源摘录 · NVD

#cve #cwe-409

漏洞预警2026-10-22 发布HIGH

Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency...

CVE-2026-115392

Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandb

来源摘录 · NVD

#cve #cwe-61

漏洞预警2026-10-22 发布MEDIUM

wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the wasi:io/streams check-write allowance for WASIp2 outgoing HTTP...

CVE-2026-115388

wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the wasi:

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-22 发布HIGH

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes by omitting source.type. At...

CVE-2026-115376

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restr

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-22 发布HIGH

Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.create_options through volume update, copy, and move operat...

CVE-2026-115372

Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.cr

来源摘录 · NVD

#cve #cwe-88

漏洞预警2026-10-22 发布LOW

OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth method, leaving expired Secret IDs valid until the periodic tidy remov...

CVE-2026-115362

OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth method, leavi

来源摘录 · NVD

#cve #cwe-613

漏洞预警2026-10-22 发布LOW

OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. Attack...

CVE-2026-115358

OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into

来源摘录 · NVD

#cve #cwe-532

漏洞预警2026-10-22 发布MEDIUM

Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attackers to read local files by supplying relative or absolute include ...

CVE-2026-115354

Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attackers to re

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-22 发布MEDIUM

Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html, .xhtml, or .htm file content as raw block_html tokens. Att...

CVE-2026-115350

Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html, .

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布HIGH

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or cat...

CVE-2026-115331

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-22 发布MEDIUM

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xml.c when parsing NETCONF rpc action envelopes. Peers with...

CVE-2026-115327

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xm

来源摘录 · NVD

#cve #cwe-824