2026-08-15 归档

今日共收录 1312 条安全情报，包含 424 个 CVE，492 篇安全通告，以及 116 篇研究论文。

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting.

CVE-2026-17209

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to c

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection.

CVE-2026-17179

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to c

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

CVE-2026-17177

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled re

历史摘要 · 未重新核验 · NVD

#cve #cwe-674

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement.

CVE-2026-17175

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due t

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths.

CVE-2026-17173

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory.

CVE-2026-17081

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via...

CVE-2026-17079

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.

CVE-2026-16915

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication.

CVE-2026-16905

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due t

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input.

CVE-2026-16879

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration.

CVE-2026-16708

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external con

历史摘要 · 未重新核验 · NVD

#cve #cwe-15

漏洞预警2026-08-14 发布INFO

ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by stori...

CVE-2026-73679

ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-08-14 发布INFO

js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead ...

CVE-2026-50029

js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in

历史摘要 · 未重新核验 · NVD

#cve #cwe-697

漏洞预警2026-08-14 发布INFO

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir() fu...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2,

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-08-14 发布INFO

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant token...

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Data

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-14 发布INFO

The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code...

CVE-2025-7639

The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to ta

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-14 发布INFO

Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the queryDatabase function in ai.php.

CVE-2026-73850

Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the qu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-14 发布INFO

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant execute_tool action in admin/ai.php lets a remote unauthentic...

CVE-2026-73847

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant exec

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-798 #cwe-1275

漏洞预警2026-08-14 发布INFO

LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint. The text and name query parameters a...

CVE-2026-63361

LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML ed

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-14 发布INFO

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public `cs_insn_name()` API forwards caller-supplied instruction IDs directly to the selected arch...

CVE-2026-49282

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public `cs_insn_name()` API forwards call

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-129 #cwe-191