2026-08-20 归档

今日共收录 1886 条安全情报，包含 1062 个 CVE，406 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-08-19 发布INFO

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations...

CVE-2026-43961

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can brea

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-08-19 发布INFO

Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that allows attackers with commit access to...

CVE-2024-58376

Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAli

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-19 发布INFO

Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTH...

CVE-2020-37267

Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authorization token in serv

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-08-19 发布INFO

Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in...

CVE-2019-25766

Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comments during certain G

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-08-19 发布INFO

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote ...

CVE-2026-76235

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated requ

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-19 发布INFO

Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.

CVE-2026-73394

Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-19 发布INFO

Unauthenticated Local File Inclusion in Resido <= 1.5 versions.

CVE-2026-73387

Unauthenticated Local File Inclusion in Resido <= 1.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-19 发布INFO

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions.

CVE-2026-73386

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-201

漏洞预警2026-08-19 发布INFO

Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.

CVE-2026-73385

Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-19 发布INFO

Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.

CVE-2026-73384

Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-201

漏洞预警2026-08-19 发布INFO

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce < 2.0.8 versions.

CVE-2026-73363

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce < 2.0.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-19 发布INFO

Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.

CVE-2026-73354

Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-19 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.

CVE-2026-73184

Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-19 发布INFO

Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.

CVE-2026-73182

Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-19 发布INFO

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) The form...

CVE-2026-67364

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-08-19 发布INFO

Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.

CVE-2026-66668

Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-19 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.

CVE-2026-66596

Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-19 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.

CVE-2026-61986

Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-19 发布INFO

Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.

CVE-2026-32552

Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-19 发布INFO

CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to...

CVE-2026-18372

CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arb

历史摘要 · 未重新核验 · NVD

#cve #cwe-79