2026-08-28 归档

今日共收录 1697 条安全情报,包含 762 个 CVE,507 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-08-28 发布INFO

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arb...

CVE-2026-67560

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-pr...

CVE-2026-61783

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages...

CVE-2026-5706

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-th...

CVE-2026-54084

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Soft...

CVE-2026-44629

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a ...

CVE-2026-38350

An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a cra...

CVE-2026-38349

An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.

CVE-2026-38348

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service (DoS) via a cra...

CVE-2026-38347

A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a cra...

CVE-2026-38346

An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (D...

CVE-2026-38345

A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via suppl...

CVE-2026-38344

A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

CVE-2026-38343

An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a D

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on the PayRange network to be publicly accessible, with or wit...

CVE-2026-18965

PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handsh...

CVE-2026-18717

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices runni...

CVE-2026-17610

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts...

CVE-2025-30156

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product per...

CVE-2026-81931

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size meta...

CVE-2026-81893

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary file...

CVE-2026-81838

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 thr

历史摘要 · 未重新核验 · NVD