2026-10-30 归档

今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。

漏洞预警2026-10-26 发布LOW

A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing of the file users.service.ts of the component Registration. Such manipulatio...

CVE-2026-116121

A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing of the file users.s

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-10-26 发布MEDIUM

A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation lead...

CVE-2026-116118

A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality o

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-10-26 发布LOW

A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpa_supplicantX.conf of the component WiFi Configur...

CVE-2026-116115

A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the

来源摘录 · NVD

#cve #cwe-665

漏洞预警2026-10-26 发布HIGH

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the f...

CVE-2026-116112

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-26 发布MEDIUM

A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts...

CVE-2026-116109

A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleto

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-10-26 发布HIGH

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manip...

CVE-2026-116106

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unkno

来源摘录 · NVD

#cve #cwe-266 #cwe-284

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_p...

CVE-2026-116103

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_tx

来源摘录 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipu...

CVE-2026-116100

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/

来源摘录 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-26 发布MEDIUM

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addnewstudent.php. Such manipulation of the argument fname lea...

CVE-2026-116097

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addne

来源摘录 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-25 发布HIGH

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file application/function.php. Executing a manipulation can lead to ...

CVE-2026-116094

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file applic

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-25 发布HIGH

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_dealer.php. The manipula...

CVE-2026-116061

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown co

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-25 发布MEDIUM

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the ...

CVE-2026-116057

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown function

来源摘录 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-10-25 发布LOW

A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módulo de Arrecadação. The manipulation leads to password h...

CVE-2026-116054

A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Mó

来源摘录 · NVD

#cve #cwe-326 #cwe-916

漏洞预警2026-10-21 发布HIGH

Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains...

CVE-2026-114490

Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an acc

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-21 发布HIGH

Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confine...

CVE-2026-114489

Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布MEDIUM

Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail the...

CVE-2026-114478

Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6

来源摘录 · NVD

#cve #cwe-441

漏洞预警2026-10-21 发布MEDIUM

Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authenticated user whose credential is confined to named do...

CVE-2026-114477

Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote au

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布HIGH

Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential holds the manage_...

CVE-2026-114476

Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a rem

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-21 发布MEDIUM

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to ...

CVE-2026-114475

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a r

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布MEDIUM

Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attack...

CVE-2026-114474

Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6

来源摘录 · NVD

#cve #cwe-348