2026-10-30 归档

今日共收录 1854 条安全情报,包含 1458 个 CVE,156 篇安全通告,以及 125 篇研究论文。

← 返回归档列表
漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse. The parser appends each chunk to its buffer. ...

CVE-2026-110678

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in i

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv. With dupkeys_as_arrayref, the va...

CVE-2026-110677

Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum. With allow_bignum, a JSON number...

CVE-2026-110676

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal dig

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv. With utf8 and allow_barekey, which relaxed e...

CVE-2026-110675

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv. With allow_barekey,...

CVE-2026-110674

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion und

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag. With allow_tags, "(" starts a tagged value. Its t...

CVE-2026-110673

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decod

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv. A quoted key of 24 or more bytes,...

CVE-2026-110672

Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missi

来源摘录 · NVD

漏洞预警2026-10-18 发布HIGH

`POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a third-party site was not rejected...

CVE-2026-107618

`POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, s

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustio...

CVE-2026-106972

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attack

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack...

CVE-2026-106971

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attac

来源摘录 · NVD

漏洞预警2026-09-23 发布MEDIUM

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate ...

CVE-2026-91814

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents

来源摘录 · NVD

漏洞预警2026-09-23 发布HIGH

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file ...

CVE-2026-91798

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure per

来源摘录 · NVD

漏洞预警2026-09-23 发布HIGH

An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malfo...

CVE-2026-91794

An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient

来源摘录 · NVD

漏洞预警2026-09-23 发布MEDIUM

When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted mali...

CVE-2026-91788

When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks r

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected sys...

CVE-2026-86981

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, mac

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, lea...

CVE-2026-107041

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized a

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

CVE-2026-107040

Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control...

CVE-2026-107038

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exporte

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism o...

CVE-2026-107036

Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an expo

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into anot...

CVE-2026-107035

Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unau

来源摘录 · NVD