#advisory

共收录 22948 条相关情报。

← 返回所有主题
安全公告2026-10-22 发布INFO

DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)

### Summary The 3.4.16 fix for GHSA-p98j-92pf-mc4p only covers a hook that removes the node it was called for. If an `I

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布CRITICAL

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to...

CVE-2026-111497

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on

来源摘录 · NVD / OSV.dev

安全公告2026-10-22 发布INFO

【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于DeepSeek-V4.1-Flash 原厂直供模型静默升级为 DeepSeek-V4.1-Flash-1017 的通知

【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于DeepSeek-V4.1-Flash 原厂直供模型静默升级为 DeepSeek-V4.1-Flash-1017 的通知

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-22 发布INFO

腾讯云分布式缓存数据库带宽服务计费策略调整

腾讯云分布式缓存数据库带宽服务计费策略调整

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-22 发布INFO

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication...

CVE-2026-114732

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side...

CVE-2026-114730

Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI...

CVE-2026-96392

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code In

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service ...

CVE-2026-110354

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread C

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service ...

CVE-2026-110353

HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaus

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource...

CVE-2026-114731

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue...

CVE-2026-96398

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking...

CVE-2026-114729

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcube_washtml in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue...

CVE-2026-96391

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker...

CVE-2026-96390

Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This...

CVE-2026-96380

Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issue affects CSS Usage

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop...

CVE-2026-96387

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authent

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing....

CVE-2026-96384

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Merma

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows...

CVE-2026-96388

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Request Forg

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-96382

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Diba carous

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-96379

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr

历史摘要 · 未重新核验 · GitHub Advisory