2026-10-31 归档

今日共收录 3279 条安全情报,包含 2996 个 CVE,94 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-30 发布HIGH

Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX provider that silently disables mTLS configured via the aut...

CVE-2026-119572

Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX pr

来源摘录 · NVD

漏洞预警2026-10-30 发布LOW

Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates addressed by object ID to the installation named in the X-Parse-...

CVE-2026-119571

Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates address

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

CVE-2026-114148

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium secur...

CVE-2026-113057

Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass w

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0...

CVE-2026-105044

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingte

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7....

CVE-2026-101770

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versio

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker may tamper with c...

CVE-2026-112556

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app ter...

CVE-2026-113947

This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a m

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file syste...

CVE-2026-106634

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln...

CVE-2026-107305

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83699

Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privil

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-107682

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on error/exit paths In two places, current code forces vmbu...

CVE-2026-99216

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime Audio can be triggered by the HPD handler and start up ...

CVE-2026-99214

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handle the TCP_ESTABLISHED -> TCP_CLOSING transition on OP_RST...

CVE-2026-99213

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handl

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure rds_rdma_cm_event_handler_cmn(...

CVE-2026-99212

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS st

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast and multicast filtering Socket filters can use SKF_NET_OFF and SK...

CVE-2026-99211

In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast and multi

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the...

CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth upd

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive wh...

CVE-2026-99204

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer setup failure F_SETFL and FIOASYNC decide whether to invok...

CVE-2026-99203

In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer se

来源摘录 · NVD