2026-08-28 归档

今日共收录 1697 条安全情报，包含 762 个 CVE，507 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-08-27 发布INFO

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for ...

CVE-2026-81573

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-27 发布INFO

In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. T...

CVE-2026-81572

In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file C:

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-08-27 发布INFO

Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions.

CVE-2026-81279

Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-27 发布INFO

Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.

CVE-2026-81277

Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-27 发布INFO

Subscriber Broken Access Control in Ditty <= 3.1.67 versions.

CVE-2026-81274

Subscriber Broken Access Control in Ditty <= 3.1.67 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-27 发布INFO

Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.

CVE-2026-81273

Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-08-27 发布INFO

Editor Broken Access Control in FluentPlayer Pro <= 1.3.2 versions.

CVE-2026-81272

Editor Broken Access Control in FluentPlayer Pro <= 1.3.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-27 发布INFO

Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.

CVE-2026-81271

Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-08-27 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WP w3all phpBB <= 3.0.6 versions.

CVE-2026-78293

Unauthenticated Cross Site Scripting (XSS) in WP w3all phpBB <= 3.0.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-27 发布INFO

Unauthenticated Cross Site Scripting (XSS) in CozyStay <= 1.10.0 versions.

CVE-2026-78289

Unauthenticated Cross Site Scripting (XSS) in CozyStay <= 1.10.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-27 发布INFO

Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.

CVE-2026-78285

Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-27 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions.

CVE-2026-78283

Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-27 发布INFO

Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.

CVE-2026-78281

Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-27 发布INFO

Editor PHP Object Injection in Fluent Boards Pro <= 2.0.11 versions.

CVE-2026-78276

Editor PHP Object Injection in Fluent Boards Pro <= 2.0.11 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-27 发布INFO

Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro <= 2.0.11 versions.

CVE-2026-78273

Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro <= 2.0.11 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-27 发布INFO

Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions.

CVE-2026-78271

Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-08-27 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions.

CVE-2026-78261

Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-27 发布INFO

Contributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions.

CVE-2026-78257

Contributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-27 发布INFO

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A caller who holds valid credentials for one entry in the L...

CVE-2026-75020

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-08-27 发布INFO

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or...

CVE-2026-74848

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. An att

历史摘要 · 未重新核验 · NVD

#cve #cwe-444