2026-08-21 归档

今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-08-20 发布INFO

Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request wi...

CVE-2026-73256

Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-08-20 发布INFO

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid ...

CVE-2026-77022

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub_44B438 of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-121

漏洞预警2026-08-20 发布INFO

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 unt...

CVE-2026-71428

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, suc

历史摘要 · 未重新核验 · NVD

#cve #cwe-601 #cwe-918

漏洞预警2026-08-20 发布INFO

dbx is a cross-platform database client for databases. Prior to 0.5.51, dbx-web auth_middleware in crates/dbx-web/src/auth.rs passes every protected request to the handler chain...

CVE-2026-55642

dbx is a cross-platform database client for databases. Prior to 0.5.51, dbx-web auth_middleware in crates/dbx-web/src/au

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-20 发布INFO

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ...

CVE-2026-18265

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-20 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.

CVE-2026-16926

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-08-20 发布INFO

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authent...

CVE-2026-15706

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Bayla

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-20 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a throug...

CVE-2026-28164

Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery.

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-08-20 发布INFO

Subscriber Arbitrary File Upload in Warehouse Cargo <= 2.6.9 versions.

CVE-2026-74018

Subscriber Arbitrary File Upload in Warehouse Cargo <= 2.6.9 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-08-20 发布INFO

Subscriber Arbitrary File Upload in Smart Cleaning <= 4.8.6 versions.

CVE-2026-74016

Subscriber Arbitrary File Upload in Smart Cleaning <= 4.8.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-08-20 发布INFO

Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions.

CVE-2026-74014

Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-08-20 发布INFO

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

CVE-2026-74001

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-08-20 发布INFO

Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.

CVE-2026-73993

Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-20 发布INFO

Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions.

CVE-2026-73992

Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.

CVE-2026-68566

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.

CVE-2026-66682

Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in Locatoraid Store Locator <= 3.9.72 versions.

CVE-2026-66680

Unauthenticated SQL Injection in Locatoraid Store Locator <= 3.9.72 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated PHP Object Injection in Flatastic <= 2.0 versions.

CVE-2026-66672

Unauthenticated PHP Object Injection in Flatastic <= 2.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.

CVE-2026-66649

Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.

CVE-2026-66609

Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89