2026-10-30 归档

今日共收录 1854 条安全情报,包含 1458 个 CVE,156 篇安全通告,以及 125 篇研究论文。

← 返回归档列表
漏洞预警2026-10-29 发布HIGH

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.

CVE-2026-92744

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Micr...

CVE-2026-107239

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (R

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布CRITICAL

A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pa...

CVE-2023-22793

A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布MEDIUM

On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process b...

CVE-2026-119317

On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布INFO

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as [>100...

CVE-2026-115943

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in Exce

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers...

CVE-2026-119325

Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_po

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store integration that may allow an authenticated user with pe...

CVE-2026-13303

HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布INFO

An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_servi...

CVE-2026-51832

An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-67203

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-67205

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布INFO

An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_servi...

CVE-2026-51831

An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a buffer overflow. A...

CVE-2026-8822

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A sp

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read...

CVE-2026-9535

A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a...

CVE-2026-9536

A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (ve

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布MEDIUM

ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task Plan Templates Store application. This vulnerability cou...

CVE-2026-6877

ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buf...

CVE-2026-8824

A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s)

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-58120

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-58118

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-58119

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布MEDIUM

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the h...

CVE-2026-119251

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in

来源摘录 · NVD / GitHub Advisory