2026-10-30 归档

今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.

CVE-2026-107015

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in anot

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially ga...

CVE-2026-90532

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported versions that are affected are 1...

CVE-2026-91222

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Work

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...

CVE-2026-91221

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布CRITICAL

When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess. During the TLS handshake, wolfSSL validates the con...

CVE-2026-87866

When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not pos

来源摘录 · NVD

#cve #cwe-295

漏洞预警2026-10-20 发布CRITICAL

An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy handle upgraded with `STARTTLS` and authenticated using a c...

CVE-2026-86411

An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy ha

来源摘录 · NVD

#cve #cwe-488

漏洞预警2026-07-22 发布CRITICAL

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macO...

CVE-2026-65590

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-23 发布CRITICAL

Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than app...

CVE-2026-115893

Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 c

来源摘录 · NVD

#cve #cwe-691

漏洞预警2026-10-20 发布CRITICAL

Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XMPP us...

CVE-2026-113867

Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming request

来源摘录 · NVD

#cve #cwe-116

漏洞预警2026-10-20 发布CRITICAL

Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's ot...

CVE-2026-112380

Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operat

来源摘录 · NVD

#cve #cwe-862 #cwe-863

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privilege...

CVE-2026-90531

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability t

来源摘录 · NVD

#cve #cwe-611

漏洞预警2026-10-13 发布CRITICAL

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-83910

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-20 发布CRITICAL

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persi...

CVE-2026-97406

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token

来源摘录 · NVD

#cve #cwe-306 #cwe-863

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...

CVE-2026-91232

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exp...

CVE-2026-91231

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions tha

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...

CVE-2026-91230

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exp...

CVE-2026-91225

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions tha

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...

CVE-2026-91224

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...

CVE-2026-91216

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布CRITICAL

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be able ...

CVE-2026-86868

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS

来源摘录 · NVD

#cve #cwe-287