2026-08-26 归档

今日共收录 1656 条安全情报，包含 834 个 CVE，420 篇安全通告，以及 108 篇研究论文。

← 返回归档列表

漏洞预警2026-08-25 发布INFO

Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated at...

CVE-2026-75496

Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-08-25 发布INFO

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requ...

CVE-2026-64204

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-25 发布INFO

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requ...

CVE-2026-64203

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-25 发布INFO

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requ...

CVE-2026-64202

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-25 发布INFO

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requ...

CVE-2026-64201

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-25 发布INFO

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In OpenEXRUtil versions 3.3.0 through 3.3.12 and ...

CVE-2026-59189

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-25 发布INFO

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 t...

CVE-2026-59187

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-787

漏洞预警2026-08-25 发布INFO

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, ...

CVE-2026-59186

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-190 #cwe-787

漏洞预警2026-08-25 发布INFO

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and...

CVE-2026-59184

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

历史摘要 · 未重新核验 · NVD

#cve #cwe-416 #cwe-787

漏洞预警2026-08-25 发布INFO

QWED is open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, schemas, and agent state before production execution. Prior t...

CVE-2026-55585

QWED is open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, sche

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-08-25 发布INFO

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handle_mount sends a `{"type":"na...

CVE-2026-55571

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-306

漏洞预警2026-08-25 发布INFO

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browser_download writes a fetched response body to join(save_dir, filename) ...

CVE-2026-55557

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browser_download wr

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-25 发布INFO

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through f...

CVE-2026-55553

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prio

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-201 #cwe-522

漏洞预警2026-08-25 发布INFO

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnera...

CVE-2026-47626

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-25 发布INFO

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attac...

CVE-2026-47624

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A su

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-08-25 发布INFO

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vul...

CVE-2026-24263

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a N

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-25 发布INFO

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnera...

CVE-2026-24262

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-25 发布INFO

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerabilit...

CVE-2026-24225

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-25 发布INFO

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially...

CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-08-25 发布INFO

NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API...

CVE-2026-24169

NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privil

历史摘要 · 未重新核验 · NVD

#cve #cwe-77