2026-08-19 归档

今日共收录 2403 条安全情报，包含 1575 个 CVE，408 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-08-18 发布INFO

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldap_authenticable.r...

CVE-2026-59825

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12,

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-08-18 发布INFO

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list while an authenticate...

CVE-2026-56684

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPending

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-08-18 发布INFO

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSH_DOTENV_FILE to so...

CVE-2026-50187

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plug

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-08-18 发布INFO

goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, `ShareHandler` reads the share token's `DownloadLimit` under `RLock`, releases the lock, serves the file, then...

CVE-2026-50139

goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, `ShareHandler` reads the share token's `DownloadLimit

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-08-18 发布INFO

goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when `goshs` is launched with WebDAV enabled (`-w`), the mode-restriction flags `--read-only`, `--upload-only`...

CVE-2026-50138

goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when `goshs` is launched with WebDAV enabled (`-w`),

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryInfo) trusts file and directory names ...

CVE-2026-48798

SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, Dire

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-08-18 发布INFO

Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.

CVE-2026-32553

Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-18 发布INFO

Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.

CVE-2026-32549

Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.

CVE-2026-32547

Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Broken Authentication in Ezoic <= 2.22.11 versions.

CVE-2026-32481

Unauthenticated Broken Authentication in Ezoic <= 2.22.11 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-08-18 发布INFO

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

CVE-2026-32473

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-18 发布INFO

Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.

CVE-2026-32472

Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-18 发布INFO

ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface ele...

CVE-2026-18534

ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing att

历史摘要 · 未重新核验 · NVD

#cve #cwe-1021

漏洞预警2026-08-18 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-73692

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-18 发布INFO

BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to repl...

CVE-2026-50575

BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted devi

历史摘要 · 未重新核验 · NVD

#cve #cwe-294 #cwe-345 #cwe-672

漏洞预警2026-08-18 发布INFO

Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions.

CVE-2026-32467

Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-18 发布INFO

Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.

CVE-2026-32466

Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-18 发布INFO

Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.

CVE-2026-32465

Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-18 发布INFO

Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.

CVE-2026-32464

Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.

CVE-2026-32333

Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79