2026-08-21 归档

今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-08-20 发布INFO

A weakness has been identified in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This affects the function CipConnMgrClass::forward_open of the file cipconnectionm...

CVE-2026-76988

A weakness has been identified in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This affects the function

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-125

漏洞预警2026-08-20 发布INFO

A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::...

CVE-2026-76987

A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-08-20 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects I...

CVE-2026-74011

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects New User Approve: fro...

CVE-2026-28163

Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control S

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-20 发布INFO

HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible ...

CVE-2026-21784

HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-20 发布INFO

Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax() and runPlaywri...

CVE-2026-18482

Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-20 发布INFO

HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to ga...

CVE-2025-62306

HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability a

历史摘要 · 未重新核验 · NVD

#cve #cwe-221

漏洞预警2026-08-20 发布INFO

HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior.

CVE-2025-62300

HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can occur where an attacker can

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-08-20 发布INFO

HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not...

CVE-2025-62299

HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to acces

历史摘要 · 未重新核验 · NVD

#cve #cwe-272

漏洞预警2026-08-20 发布INFO

n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP cli...

CVE-2026-77085

n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent r

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1) contains a code execution vulnerability in the Git node. The Git node executed certain repository-local git configuration va...

CVE-2026-77084

n8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1) contains a code execution vulnerability in the Git node. The Git no

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-20 发布INFO

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, ...

CVE-2026-77083

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service (ReDoS) vulnerability in the Filter and Switch nodes, which comp...

CVE-2026-77082

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service (ReDoS)

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the node's Authentication parameter is set to expressio...

CVE-2026-77081

n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. Whe

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read and write vulnerability in the Snowflake node, which passes free-form Execute Que...

CVE-2026-77080

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read and write vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-20 发布INFO

n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion (reassignment) path. When deleting a custom project role with a reassignment ta...

CVE-2026-77079

n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion (reassignment) path. W

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-20 发布INFO

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox escape. The runner's prototype-freezing routine covers globalThis functions but not ...

CVE-2026-77077

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox escape. The runner's protot

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-08-20 发布INFO

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. When a GraphQL request fails at the connection level, the n...

CVE-2026-77076

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. Wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-209

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor splic...

CVE-2026-77075

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resour

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-08-20 发布INFO

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primi...

CVE-2026-77074

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text oper

历史摘要 · 未重新核验 · NVD

#cve #cwe-94