2026-08-04 归档

今日共收录 1122 条安全情报,包含 327 个 CVE,410 篇安全通告,以及 104 篇研究论文。

← 返回归档列表
漏洞预警2026-08-03 发布INFO

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file /usr/lib/oui-httpd/rpc/logread of the component Logre...

CVE-2026-18599

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get_system_log of the file /usr/lib/oui-httpd/rpc/logread of the comp...

CVE-2026-18598

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get_system_l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker...

CVE-2026-18574

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/<id> endpoint accepted HTTP GET request...

CVE-2026-69082

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. Th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint accepts a user-controlled days query p...

CVE-2026-69079

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functionality. User-controlled CTI content, including conversio...

CVE-2026-69078

CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local att...

CVE-2026-68742

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A vulnerability in Wapt Server before version 2.6.1.17813 allows a  remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve ...

CVE-2026-33591

A vulnerability in Wapt Server before version 2.6.1.17813 allows a  remote unauthenticated attacker to bypass security r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is not authenticated or integrity-protected. On each launch ...

CVE-2026-0392

eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

FlowIntel is affected by a stored cross-site scripting vulnerability through multiple user-controlled or administrator-controlled fields. Persisted values—including case titles...

CVE-2026-69075

FlowIntel is affected by a stored cross-site scripting vulnerability through multiple user-controlled or administrator-c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used ...

CVE-2026-63563

Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users.

CVE-2026-63545

Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When th...

CVE-2026-62416

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, requir

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.

CVE-2026-60011

Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username e...

CVE-2026-8794

PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perf...

CVE-2026-8793

PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Cont...

CVE-2026-28147

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

CVE-2026-21555

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

CVE-2026-21554

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

CVE-2026-21553

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

历史摘要 · 未重新核验 · NVD