2026-08-09 归档

今日共收录 815 条安全情报,包含 75 个 CVE,398 篇安全通告,以及 81 篇研究论文。

← 返回归档列表
安全公告2026-08-08 发布INFO

A vulnerability was found in INQUIRELAB mcp-bridge-api up to...

CVE-2026-19263

A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted elem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0...

CVE-2026-16574

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks...

CVE-2026-16595

The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is...

CVE-2026-19259

A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMapping

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one...

CVE-2026-16608

The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

The Appointment Hour Booking WordPress plugin before 1.5.88 does not validate a client-supplied...

CVE-2026-16282

The Appointment Hour Booking WordPress plugin before 1.5.88 does not validate a client-supplied booking price against t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when...

CVE-2026-16267

The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key...

CVE-2026-16269

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthentica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...

CVE-2026-18988

The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'accordionTitleTag' block a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on...

CVE-2026-8798

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X...

CVE-2026-13505

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X ser

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2025-4438

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient...

CVE-2026-9031

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied da

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous...

CVE-2026-9030

A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction han

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Adobe Genuine Software Integrity Service was affected by an Incorrect Authorization vulnerability...

CVE-2026-71381

Adobe Genuine Software Integrity Service was affected by an Incorrect Authorization vulnerability that could result in a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-70624

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-70623

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function...

CVE-2026-19244

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool...

CVE-2026-19245

A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function...

CVE-2026-19246

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_image_data_url of the f

历史摘要 · 未重新核验 · GitHub Advisory