#advisory

共收录 22911 条相关情报。

← 返回所有主题
安全公告2026-10-29 发布INFO

【智能体开发平台 ADP】 关于混元生图 3.5 Preview 工具价格调整公告

【智能体开发平台 ADP】 关于混元生图 3.5 Preview 工具价格调整公告

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-29 发布INFO

【云数据库 SQL Server】关于账号管理功能及接口变更的公告

【云数据库 SQL Server】关于账号管理功能及接口变更的公告

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-29 发布INFO

【云数据库 SQL Server】关于操作日志文件生成策略及采集开关变更的公告

【云数据库 SQL Server】关于操作日志文件生成策略及采集开关变更的公告

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-29 发布INFO

浙公网安备 33010602009975号

浙公网安备 33010602009975号

历史摘要 · 未重新核验 · 阿里云安全公告

安全公告2026-10-29 发布INFO

京网文〔2020〕6051-1195号

京网文〔2020〕6051-1195号

历史摘要 · 未重新核验 · 360CERT

安全公告2026-10-29 发布INFO

(总)网出证(京)字第281号

(总)网出证(京)字第281号

历史摘要 · 未重新核验 · 360CERT

安全公告2026-10-29 发布INFO

京公网安备 11000002002063号

京公网安备 11000002002063号

历史摘要 · 未重新核验 · 360CERT

漏洞预警2026-10-29 发布MEDIUM

The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat actor could read produ...

CVE-2026-114173

The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefron

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布MEDIUM

The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting. A threat actor able to modify the...

CVE-2026-113409

The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to store

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An unauthenticated threat actor...

CVE-2026-113387

The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secre

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布MEDIUM

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component ...

CVE-2026-118590

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布MEDIUM

A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the file feedfinder2.py. Performing a manipulation results in s...

CVE-2026-118586

A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the fi

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布LOW

A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad931c218140df4fb23809d4fab. This vulnerability affects unk...

CVE-2026-118585

A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-28 发布MEDIUM

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipula...

CVE-2026-118578

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-28 发布MEDIUM

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the component Request Forwarder. The manipulation leads to ser...

CVE-2026-118577

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the c

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-28 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-111575

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-28 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-111486

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-28 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-111478

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

安全公告2026-10-28 发布MEDIUM

Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

CVE-2026-115927

### Summary When Tornado reads an HTTP/1.1 body that uses chunked transfer encoding, it processes all chunks that have

来源摘录 · GitHub Advisory

安全公告2026-10-28 发布LOW

Tornado: Open redirect in RedirectHandler via protocol-relative URLs

CVE-2026-116578

### Summary `tornado.web.RedirectHandler` builds its target URL by substituting parts of the request path into a templa

来源摘录 · GitHub Advisory