2026-08-20 归档

今日共收录 1886 条安全情报，包含 1062 个 CVE，406 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-08-19 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injection. This issue ...

CVE-2026-16019

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Faydam Innovation

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-19 发布INFO

Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.

CVE-2026-73391

Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-19 发布INFO

Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.

CVE-2026-73390

Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-08-19 发布INFO

Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.

CVE-2026-73389

Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-19 发布INFO

Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.

CVE-2026-73388

Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-19 发布INFO

Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions.

CVE-2026-73364

Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-19 发布INFO

Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.

CVE-2026-73347

Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-08-19 发布INFO

Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.

CVE-2026-73185

Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-19 发布INFO

Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.

CVE-2026-73183

Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-19 发布INFO

Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.

CVE-2026-66613

Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-1336

漏洞预警2026-08-19 发布INFO

The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated ...

CVE-2026-18937

The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input o

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-08-19 发布INFO

The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to change the email address o...

CVE-2026-18776

The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, all

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-19 发布INFO

The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache file names, allowing unauthenticated attackers to write a fi...

CVE-2026-18051

The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-19 发布INFO

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manip...

CVE-2026-76008

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox-

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-121

漏洞预警2026-08-19 发布INFO

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicCon...

CVE-2026-76004

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-121

漏洞预警2026-08-19 发布INFO

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argum...

CVE-2026-76003

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /gofo

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-121

漏洞预警2026-08-18 发布INFO

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (...

CVE-2026-76036

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbi

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-08-18 发布INFO

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HT...

CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.3. Easily exploitable vulner...

CVE-2026-73930

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 1.4.19. Easily exploitable vulne...

CVE-2026-73924

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · NVD

#cve #cwe-284