2026-08-26 归档

今日共收录 1656 条安全情报，包含 834 个 CVE，420 篇安全通告，以及 108 篇研究论文。

← 返回归档列表

漏洞预警2026-08-25 发布INFO

NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted...

CVE-2026-24168

NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-08-25 发布INFO

NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafted API request. A s...

CVE-2026-24167

NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator co

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-08-25 发布INFO

NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successf...

CVE-2026-24166

NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-c

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-08-25 发布INFO

The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This pa...

CVE-2026-19913

The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-25 发布INFO

The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem pa...

CVE-2026-19912

The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution vulnerability caused by

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-25 发布INFO

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code ex...

CVE-2026-18445

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-25 发布INFO

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure...

CVE-2026-18444

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered

历史摘要 · 未重新核验 · NVD

#cve #cwe-195

漏洞预警2026-08-25 发布INFO

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requ...

CVE-2026-16234

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-25 发布INFO

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requ...

CVE-2026-16233

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-25 发布INFO

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2_init_fs() (subsys/fs/ext2/ext2_impl.c) by passing fs_blocks = s_blocks_count - s_first_data_block to...

CVE-2026-13478

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2_init_fs() (subsys/fs/ext2/ext2_impl.c) by p

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-25 发布INFO

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocpp_process_server_msg() the code call...

CVE-2026-13217

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLR

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-25 发布INFO

The virtio PCI driver (drivers/virtio/virtio_pci.c) parses a device's PCI capability list during driver initialization. In virtio_pci_read_cap() the device-supplied capability l...

CVE-2026-13216

The virtio PCI driver (drivers/virtio/virtio_pci.c) parses a device's PCI capability list during driver initialization.

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-25 发布INFO

X-AnyLabeling's model downloader disabled TLS certificate verification. download_with_retry in anylabeling/services/auto_labeling/model.py built a context with ssl._create_unver...

CVE-2026-79785

X-AnyLabeling's model downloader disabled TLS certificate verification. download_with_retry in anylabeling/services/auto

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-08-25 发布INFO

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class in vocos/pretrained.py takes the class_path value from t...

CVE-2026-79784

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class

历史摘要 · 未重新核验 · NVD

#cve #cwe-470

漏洞预警2026-08-25 发布INFO

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on atta...

CVE-2026-79783

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local back

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-08-25 发布INFO

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTT...

CVE-2026-79782

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTT

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-08-25 发布INFO

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. A...

CVE-2026-79781

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-l

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-25 发布INFO

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host ...

CVE-2026-79780

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, al

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-25 发布INFO

rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after...

CVE-2026-79779

rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization an

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-08-25 发布INFO

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A mali...

CVE-2026-79778

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a

历史摘要 · 未重新核验 · NVD

#cve #cwe-248