2026-08-19 归档

今日共收录 2403 条安全情报，包含 1575 个 CVE，408 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-08-17 发布INFO

The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing ...

CVE-2026-64780

The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-08-17 发布INFO

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS ...

CVE-2026-64779

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-08-17 发布INFO

The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Visiting a ...

CVE-2026-64778

The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-17 发布INFO

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An app may be able to leak sensitive kernel state.

CVE-2026-64760

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10.

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-17 发布INFO

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS T...

CVE-2026-64715

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-08-17 发布INFO

Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition's PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/ad...

CVE-2026-63178

Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition's PATCH /manage/admin/user-group/{user_group

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-17 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Pr...

CVE-2026-43795

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-08-17 发布INFO

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS ...

CVE-2026-43794

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-08-17 发布INFO

A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An attacker in a privileged network position may be ab...

CVE-2026-43667

A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-08-17 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing maliciously crafted web content may lead to an unexpecte...

CVE-2026-28984

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-416

漏洞预警2026-08-17 发布INFO

This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization stack, a user wh...

CVE-2026-11817

This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments a

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-08-17 发布INFO

Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate WebSocket command field types which allows an authenticated user to crash the plugi...

CVE-2026-10080

Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate WebSocket command field ty

历史摘要 · 未重新核验 · NVD

#cve #cwe-704

漏洞预警2026-08-17 发布INFO

Pandora contains a stored cross-site scripting (XSS) vulnerability in the rendering of URL observables. A URL extracted from or associated with an analyzed file was inserted dir...

CVE-2026-75531

Pandora contains a stored cross-site scripting (XSS) vulnerability in the rendering of URL observables. A URL extracted

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-17 发布INFO

Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the submitted f...

CVE-2026-75529

Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-17 发布INFO

SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler wi...

CVE-2026-75482

SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-17 发布INFO

SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, ...

CVE-2026-75481

SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service acco

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-08-17 发布INFO

OpenViking debug vector scroll and count endpoints apply only account-level scoping without user-level access controls, allowing authenticated users to read all co-tenant record...

CVE-2026-75480

OpenViking debug vector scroll and count endpoints apply only account-level scoping without user-level access controls,

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-08-17 发布INFO

JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate all reports and retr...

CVE-2026-75479

JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows un

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-17 发布INFO

Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by ...

CVE-2026-75109

Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authe

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-17 发布INFO

Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they are not...

CVE-2026-75108

Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any

历史摘要 · 未重新核验 · NVD

#cve #cwe-862