2026-08-11 归档

今日共收录 1506 条安全情报,包含 770 个 CVE,368 篇安全通告,以及 83 篇研究论文。

← 返回归档列表
漏洞预警2026-08-10 发布INFO

The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during ...

CVE-2026-13600

The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before settin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access a...

CVE-2026-13170

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to includ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path...

CVE-2026-13133

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to...

CVE-2026-12971

The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() fu...

CVE-2026-12570

A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading maliciou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Rejected reason: This is rejected.

CVE-2026-17519

Rejected reason: This is rejected.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toU...

CVE-2026-72522

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or...

CVE-2026-19389

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdem

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block ...

CVE-2026-19387

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/D

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=set_appoin...

CVE-2026-19384

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unkno

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the comp...

CVE-2026-19383

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the compo...

CVE-2026-19381

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to impr...

CVE-2026-19380

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argu...

CVE-2026-19378

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_article of the file news_scraper_mcp/server.py. The manipulat...

CVE-2026-19375

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_arti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/rout...

CVE-2026-19374

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affect

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts ...

CVE-2026-19372

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component g...

CVE-2026-19370

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSyn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The m...

CVE-2026-19369

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functionality of the file src/tools/rangeConfig.ts of the component...

CVE-2026-19367

A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functional

历史摘要 · 未重新核验 · NVD