2026-08-15 归档

今日共收录 1312 条安全情报,包含 424 个 CVE,492 篇安全通告,以及 116 篇研究论文。

← 返回归档列表
安全公告2026-08-14 发布INFO

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code...

CVE-2026-73678

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

OpenAM Insecure SSO Cookie Initialization

CVE-2026-53660

## Summary **Description** An Insecure Default Initialization of Resource (CWE-1188) issue in the OpenAM default config

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

CVE-2026-35219

## Summary Budibase automation steps (outgoing webhook, Zapier, n8n, Slack, Discord, Make.com) make server-side HTTP re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

A command injection vulnerability exists in Security Center where a remote, unauthenticated...

CVE-2026-19682

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

An authenticated command injection vulnerability exists in Security Center related to file upload...

CVE-2026-19681

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacke

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the...

CVE-2026-57469

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuratio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

A remote code execution vulnerability exists in Tenable Security Center's report generation...

CVE-2026-19626

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authentica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts

CVE-2026-35511

The OAuth callback handler links incoming OAuth identities (Google, GitHub, etc.) to existing accounts matched by email

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-13 发布INFO

nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences

CVE-2026-12243

# Summary nltk.data.load() and nltk.data.find() resolve user-supplied resource names to filesystem paths using url2pathn

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-08-15 发布INFO

Sign in to Cloud

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-08-15 发布INFO

Sign Up for Free Cloud Tier

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-08-15 发布INFO

iOS 26.4.2 and iPadOS 26.4.2

iOS 26.4.2 and iPadOS 26.4.2

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-08-15 发布INFO

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.8 and iPadOS 18.7.8

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-08-15 发布INFO

iOS 18.7.7 and iPadOS 18.7.7

iOS 18.7.7 and iPadOS 18.7.7

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-08-15 发布INFO

iOS 26.4 and iPadOS 26.4

iOS 26.4 and iPadOS 26.4

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-08-15 发布INFO

Background Security Improvements for iOS, iPadOS, and macOS

Background Security Improvements for iOS, iPadOS, and macOS

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-08-15 发布INFO

iOS 16.7.15 and iPadOS 16.7.15

iOS 16.7.15 and iPadOS 16.7.15

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-08-15 发布INFO

iOS 15.8.7 and iPadOS 15.8.7

iOS 15.8.7 and iPadOS 15.8.7

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-08-15 发布INFO

iOS 26.3 and iPadOS 26.3

iOS 26.3 and iPadOS 26.3

历史摘要 · 未重新核验 · Apple Security Releases