2026-08-20 归档

今日共收录 1886 条安全情报，包含 1062 个 CVE，406 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-08-18 发布INFO

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 a...

CVE-2026-60699

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported version that is affected is 11.2.25.0.000. Easily ex...

CVE-2026-60682

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The suppo

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-18 发布INFO

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 a...

CVE-2026-60680

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 a...

CVE-2026-60679

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-08-18 发布INFO

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is affected is 8.5.8. ...

CVE-2026-60392

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-18 发布INFO

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploi...

CVE-2026-60391

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Froxlor is open source server administration software. Prior to 2.3.8, the standalone lib/ajax.php entry point bypasses the centralized request validation in lib/init.php, and A...

CVE-2026-55593

Froxlor is open source server administration software. Prior to 2.3.8, the standalone lib/ajax.php entry point bypasses

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-08-18 发布INFO

Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record...

CVE-2026-54543

Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Ap

历史摘要 · 未重新核验 · NVD

#cve #cwe-74

漏洞预警2026-08-18 发布INFO

Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib/Froxlor/Api/Commands/Admins.php accept an attacker-contr...

CVE-2026-54348

Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-18 发布INFO

Froxlor is open source server administration software. Prior to 2.3.8, DNS TXT record content accepted by lib/Froxlor/Api/Commands/DomainZones.php can contain HTML special chara...

CVE-2026-54347

Froxlor is open source server administration software. Prior to 2.3.8, DNS TXT record content accepted by lib/Froxlor/Ap

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in custom_components/blueprint_studi...

CVE-2026-53458

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio

历史摘要 · 未重新核验 · NVD

#cve #cwe-209

漏洞预警2026-08-18 发布INFO

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy stateless terminal command execution path in custom_components/...

CVE-2026-53457

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy statel

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in custom_components/blue...

CVE-2026-53456

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-18 发布INFO

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in custom_c...

CVE-2026-53455

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-18 发布INFO

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio exposed administrator-intended backend API actions to any...

CVE-2026-53453

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-18 发布INFO

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allo...

CVE-2026-52817

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

漏洞预警2026-08-18 发布INFO

Froxlor is open source server administration software. Prior to 2.3.7, the API authentication path in lib/Froxlor/Api/FroxlorRPC.php and FroxlorRPC::validateAuth accepts an API ...

CVE-2026-52793

Froxlor is open source server administration software. Prior to 2.3.7, the API authentication path in lib/Froxlor/Api/Fr

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-08-18 发布INFO

fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a r...

CVE-2026-18504

fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-18 发布INFO

fastify is a fast and low overhead web framework for Node.js. Impact: the fix for CVE-2026-3635 added a guard on the forwarded-header reads used to derive the request host, prot...

CVE-2026-16732

fastify is a fast and low overhead web framework for Node.js. Impact: the fix for CVE-2026-3635 added a guard on the for

历史摘要 · 未重新核验 · NVD

#cve #cwe-348

漏洞预警2026-08-18 发布INFO

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to pr...

CVE-2026-15571

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity

历史摘要 · 未重新核验 · NVD

#cve #cwe-341