2026-08-13 归档

今日共收录 1881 条安全情报,包含 959 个 CVE,493 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, an anonymous ListObjectVersions request in rustfs/src/storage/access.rs that lacks a direct ...

CVE-2026-73290

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, an anonymous ListObjectVersions req

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS evaluates the ForAllValues: and ForAnyValue: set qualifiers with the negated string o...

CVE-2026-73289

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS evaluates the ForAllValues:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/object_lock/objectlock_sys.rs lets ...

CVE-2026-73288

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS handles FTPS MKD in FtpsDriver::mkd in crates/protocols/src/ftps/driver.rs by calling...

CVE-2026-73287

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS handles FTPS MKD in FtpsDriv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS get_condition_values folds attacker-controlled request headers from HeaderMap into se...

CVE-2026-73286

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS get_condition_values folds a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.64 until 1.0.0-rc.1, RustFS external OPA authorization enabled by RUSTFS_POLICY_PLUGIN_URL in crate...

CVE-2026-73285

RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.64 until 1.0.0-rc.1, RustFS external OPA a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. RustFS AddServiceAccount in rustfs/src/admin/handlers/service_account.rs accepts an attacker-controlled target_user ...

CVE-2026-73284

RustFS is a distributed object storage system built in Rust. RustFS AddServiceAccount in rustfs/src/admin/handlers/servi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, CopyObject sources, and UploadPartCopy sources with s3:GetO...

CVE-2026-73265

RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, Co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_co...

CVE-2026-73264

Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration acce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resource_tags, assembled by unroll_di...

CVE-2026-73262

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

An unauthenticated user may bypass authentication under specific cache conditions.

CVE-2026-68760

An unauthenticated user may bypass authentication under specific cache conditions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A user with access to a valid SAML response may impersonate another user under specific conditions.

CVE-2026-68757

A user with access to a valid SAML response may impersonate another user under specific conditions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A party with write access to stored session data may affect JFrog Artifactory under specific conditions.

CVE-2026-68756

A party with write access to stored session data may affect JFrog Artifactory under specific conditions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A bundle writer may create misleading release promotion information under specific conditions.

CVE-2026-68755

A bundle writer may create misleading release promotion information under specific conditions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A repository publisher without delete permission may modify protected package content under specific conditions.

CVE-2026-68754

A repository publisher without delete permission may modify protected package content under specific conditions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way.

CVE-2026-68753

An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A Project Resource Manager may gain broader administrative privileges under specific conditions.

CVE-2026-68752

A Project Resource Manager may gain broader administrative privileges under specific conditions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled gues...

CVE-2026-67287

Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary dir...

CVE-2026-67286

Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

An authenticated user may write files outside the intended Artifactory work directory under specific conditions.

CVE-2026-66382

An authenticated user may write files outside the intended Artifactory work directory under specific conditions.

历史摘要 · 未重新核验 · NVD