2026-10-30 归档

今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。

漏洞预警2026-10-29 发布INFO

P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherType, any VLAN tags and the PROFINET FrameID. The VLAN tag ...

CVE-2026-111734

P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherTy

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-29 发布INFO

P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID for a record index that requires an AR (AR specific indic...

CVE-2026-111733

P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-10-29 发布INFO

P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not part of the block definition...

CVE-2026-111732

P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVen

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-29 发布INFO

P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The loop over the ports never advanced to t...

CVE-2026-111731

P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (w

来源摘录 · NVD

#cve #cwe-835

漏洞预警2026-10-29 发布INFO

P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The received length (up to 255) was used to copy data into the 24...

CVE-2026-111730

P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The rece

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-20 发布HIGH

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8...

CVE-2026-101773

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-28 发布HIGH

MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, including the U/user, D/domain-admin, and H/host roles, can...

CVE-2026-85749

MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, in

来源摘录 · NVD

#cve #cwe-566 #cwe-639

漏洞预警2026-10-28 发布MEDIUM

Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, the `udevices` JSON command handler, `Cmd_UpdateDevices` in ...

CVE-2026-75520

Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, the

来源摘录 · NVD

#cve #cwe-22 #cwe-862

漏洞预警2026-10-28 发布HIGH

Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the affected component, has an optional `--mcp-http` mod...

CVE-2026-61542

Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem,

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-28 发布MEDIUM

Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker ...

CVE-2026-58458

Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-28 发布INFO

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only `GET /proxy-image` endpoint, exposed as `...

CVE-2026-57448

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the adm

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-29 发布MEDIUM

A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to an inform...

CVE-2026-40063

A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布MEDIUM

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the [mpg] and [m...

CVE-2026-119054

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Cont

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布MEDIUM

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writeto() that bounds copies by pbuf->len instead of remainin...

CVE-2026-119053

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writ

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-29 发布MEDIUM

flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that allows attackers to create huge sparse arrays via unbounded numeric keys. Attac...

CVE-2026-119051

flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that allows attackers to cr

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-29 发布HIGH

FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. ...

CVE-2026-119049

FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another us

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-29 发布MEDIUM

WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability in download_remote_file that allows shop_manager users to...

CVE-2026-118989

WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-28 发布MEDIUM

PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerability in the update_fees AJAX handler that allows unauthe...

CVE-2026-118757

PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerab

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-28 发布MEDIUM

gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to delete directories outside the password store via ../ ent...

CVE-2026-118756

gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-28 发布MEDIUM

CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trusts unvalidated embedded-file 'filename' attributes in XML...

CVE-2026-118693

CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trus

来源摘录 · NVD

#cve #cwe-36