2026-08-11 归档

今日共收录 1506 条安全情报，包含 770 个 CVE，368 篇安全通告，以及 83 篇研究论文。

漏洞预警2026-08-10 发布INFO

Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 be...

CVE-2026-16626

Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-08-10 发布INFO

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

CVE-2026-10754

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-10 发布INFO

Discourse is an open-source discussion platform. From 2026.1.0-latest until 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-latest.1, anyone able to run a parameterized Data Explorer...

CVE-2026-72731

Discourse is an open-source discussion platform. From 2026.1.0-latest until 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-l

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-10 发布INFO

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the Rich Text Editor rendered a chat-transcript username as HTML, allowing ...

CVE-2026-72730

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the Rich Text Edit

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-10 发布INFO

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the discourse-local-dates plugin rendered crafted local-date format data as...

CVE-2026-72729

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the discourse-loca

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-10 发布INFO

Discourse is an open-source discussion platform. Prior to 2026.1.7, an authenticated user could submit specially formed URLs that bypassed the Onebox allowlist and embedded mali...

CVE-2026-72728

Discourse is an open-source discussion platform. Prior to 2026.1.7, an authenticated user could submit specially formed

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Discourse is an open-source discussion platform. Prior to 026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, a low-privileged user could place crafted content in the moderation review q...

CVE-2026-72727

Discourse is an open-source discussion platform. Prior to 026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, a low-privileged us

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-10 发布INFO

A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs read access to a shared communication topic. This a...

CVE-2026-71577

A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-10 发布INFO

A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, af...

CVE-2026-71576

A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-08-10 发布INFO

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` ut...

CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were tempora

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-08-10 发布INFO

HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user-controlled input.

CVE-2026-56619

HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and out

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-10 发布INFO