2026-08-12 归档

今日共收录 1910 条安全情报,包含 1065 个 CVE,437 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
漏洞预警2026-08-11 发布INFO

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high ...

CVE-2026-66763

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects usi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious extern...

CVE-2026-58248

SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a speci

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously us...

CVE-2026-58247

SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This coul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access ce...

CVE-2026-58245

SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated atta...

CVE-2026-58244

SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain applicati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database o...

CVE-2026-58243

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modify configuration tables that control ac...

CVE-2026-58241

SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating ...

CVE-2026-58236

SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing securit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed i...

CVE-2026-58235

SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related applicat...

CVE-2026-44765

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet...

CVE-2026-44764

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Expl...

CVE-2026-44763

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an auth...

CVE-2026-44762

SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a...

CVE-2026-40130

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f...

CVE-2026-48161

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contain

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to ...

CVE-2025-30239

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may...

CVE-2025-30238

In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. An attacker ca...

CVE-2025-30237

The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the channels.convertToT...

CVE-2026-72919

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user ...

CVE-2026-72918

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7

历史摘要 · 未重新核验 · NVD