2026-08-12 归档

今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulner...

CVE-2026-48439

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabili...

CVE-2026-48438

CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application deni

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabi...

CVE-2026-48437

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability t...

CVE-2026-48436

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit t...

CVE-2026-48435

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulner...

CVE-2026-48434

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vuln...

CVE-2026-48387

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-11 发布INFO

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vul...

CVE-2026-48386

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-08-11 发布INFO

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in a Security feature byp...

CVE-2026-48385

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-11 发布INFO

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this v...

CVE-2026-48384

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-servi

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabili...

CVE-2026-48376

is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass.

历史摘要 · 未重新核验 · NVD

#cve #cwe-116

漏洞预警2026-08-11 发布INFO

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerabil...

CVE-2026-48375

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue requires user int...

CVE-2026-47922

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-11 发布INFO

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a diffe...

CVE-2026-47704

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-11 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.

CVE-2026-47299

Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-08-11 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

CVE-2026-47285

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unau

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-08-11 发布INFO

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagne...

CVE-2026-43606

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local acce

历史摘要 · 未重新核验 · NVD

#cve #cwe-208

漏洞预警2026-08-11 发布INFO

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.

CVE-2026-42976

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges loca

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-11 发布INFO

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

CVE-2026-40375

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-11 发布INFO

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to...

CVE-2026-34635

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low

历史摘要 · 未重新核验 · NVD

#cve #cwe-321