2026-08-28 归档

今日共收录 1697 条安全情报，包含 762 个 CVE，507 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and ...

CVE-2026-78174

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-priv

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-269 #cwe-532

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow stat...

CVE-2026-78103

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-08-28 发布INFO

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/...

CVE-2026-78047

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privile

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-28 发布INFO

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) cond...

CVE-2026-78008

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator wi

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-28 发布INFO

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API use...

CVE-2026-61802

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. I

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522

漏洞预警2026-08-28 发布INFO

In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through...

CVE-2026-38822

In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client s

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon (den...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on th

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-08-28 发布INFO

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint becaus...

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.

CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaus

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-28 发布INFO

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially cr...

CVE-2026-19318

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated a

历史摘要 · 未重新核验 · NVD

#cve #cwe-121 #cwe-129 #cwe-191

漏洞预警2026-08-28 发布INFO

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted netw...

CVE-2026-19315

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-763 #cwe-843

漏洞预警2026-08-28 发布INFO

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network...

CVE-2026-19313

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-190 #cwe-680

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN packets to the log listening service.

CVE-2026-13108

WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN pac

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-28 发布INFO

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated...

CVE-2026-13086

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security fe

历史摘要 · 未重新核验 · NVD

#cve #cwe-121 #cwe-787 #cwe-798

漏洞预警2026-08-28 发布INFO

Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi...

CVE-2026-82072

Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-28 发布INFO

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a denial of service, ...

CVE-2026-81851

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-1284

漏洞预警2026-08-28 发布INFO

A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function s_fetch_page/s_fetch_pattern of the file src/scrapling_fetch_...

CVE-2026-81848

A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function s_fe

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-28 发布INFO

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save_pipeline/load_pipeline of the file pipeline_tools.py. Performin...

CVE-2026-81847

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save_pipeli

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-28 发布INFO

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function import_session/export_session of the file mcp_sequential_thinking/serve...

CVE-2026-81845

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function import_session

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-28 发布INFO

A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchT...

CVE-2026-81837

A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/

历史摘要 · 未重新核验 · NVD

#cve #cwe-22