2026-08-20 归档

今日共收录 1886 条安全情报，包含 1062 个 CVE，406 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements.

CVE-2026-16850

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command inj

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-08-19 发布INFO

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpc_client_recv_fragment in libfreerdp/core/gateway/rpc_client.c ensures the response reassembl...

CVE-2026-55194

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpc_client_recv_fragment in libfreerdp

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-08-19 发布INFO

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled max_xmit_frag value in libfreerdp/c...

CVE-2026-55193

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accep

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-08-19 发布INFO

Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The stripeCharges and payAuthorize endpoints accept the charge total from a clien...

CVE-2026-67363

Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The stripeCharges and pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-472 #cwe-602

漏洞预警2026-08-19 发布INFO

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13....

CVE-2026-19490

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 thr

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-19 发布INFO

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13....

CVE-2026-19489

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 thr

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-19 发布INFO

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit b...

CVE-2026-49420

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewr

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-08-19 发布INFO

The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are reachable by unaut...

CVE-2026-16058

The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its mult

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-19 发布INFO

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wan_type causes ...

CVE-2026-75985

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/pin

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-08-18 发布INFO

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 7.0.0, check-plugins/logfile/logfile accepted a free-form --...

CVE-2026-73973

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 7.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-269

漏洞预警2026-08-18 发布INFO

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ...

CVE-2026-70803

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Support

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ...

CVE-2026-70764

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Support

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu...

CVE-2026-60693

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Support

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell...

CVE-2026-32657

Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, D

历史摘要 · 未重新核验 · NVD

#cve #cwe-61

安全公告2026-08-20 发布INFO

Compatibility Test Suite (CTS)

本公告来自 Android Security Bulletin，主题为 Compatibility Test Suite（CTS，兼容性测试套件）。CTS 是 Android 提供的一套自动化测试工具，用于验证设备实现是否符合 Androi