2026-08-25 归档

今日共收录 1135 条安全情报,包含 329 个 CVE,404 篇安全通告,以及 111 篇研究论文。

← 返回归档列表
安全公告2026-08-24 发布INFO

An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage...

CVE-2026-75369

An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment:...

CVE-2026-72711

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the che

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own...

CVE-2026-72705

The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Rocq Prover does not restore the universe graph's copy of the universe checking flag when a...

CVE-2026-72714

Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec...

CVE-2026-75368

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API...

CVE-2026-71508

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API update endpoint that allows

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote...

CVE-2026-78417

Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API...

CVE-2026-71507

Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API company bank account w

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit...

CVE-2026-75371

An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc,...

CVE-2026-71832

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of...

CVE-2026-75370

An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC sof

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows...

CVE-2026-71510

Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Print Assumptions does not report that a definition was produced while universe checking was...

CVE-2020-37268

Print Assumptions does not report that a definition was produced while universe checking was disabled when that definiti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API...

CVE-2026-71511

Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability....

CVE-2026-61419

Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API...

CVE-2026-71506

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA...

CVE-2026-13081

Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA should assign CVE IDs fo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API...

CVE-2026-71504

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers wi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API...

CVE-2026-71505

Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API third-party site accou

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter...

CVE-2025-26237

D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can b

历史摘要 · 未重新核验 · GitHub Advisory