2026-08-20 归档

今日共收录 1886 条安全情报,包含 1062 个 CVE,406 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-08-19 发布INFO

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent...

CVE-2026-76832

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function log_email_server of the file /cgi-bin/email.cgi of the component ssi. Perform...

CVE-2026-76591

A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function log_email_server of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" Splunk roles could read a partially masked Application Pro...

CVE-2026-76405

In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerbe...

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure a non-secure...

CVE-2026-76402

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure timestamp ex...

CVE-2026-76401

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API and influence responses from...

CVE-2026-76400

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL...

CVE-2026-76399

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permission th...

CVE-2026-76398

In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated wi...

CVE-2026-76397

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model file throu...

CVE-2026-76396

In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a sc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted ...

CVE-2026-76395

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and read or m...

CVE-2026-76394

In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload request for the sam...

CVE-2026-76393

In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by anothe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container s...

CVE-2026-76392

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain pre

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data...

CVE-2026-76391

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run search

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static f...

CVE-2026-76390

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the get_talos_enrichment capability could send a crafted request to...

CVE-2026-76389

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the get_ta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mc_investigation_read capability could inject Search Pro...

CVE-2026-76387

In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invokin...

CVE-2026-76386

In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could ex

历史摘要 · 未重新核验 · NVD