2026-08-29 归档

今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。

漏洞预警2026-08-28 发布INFO

Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage() in src/RestoreAction.php builds ArchiveAdmin restore notif...

CVE-2026-55779

Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage() i

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-28 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fun...

CVE-2026-55764

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role hold

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-28 发布INFO

multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted text field names can make multer's field parser synchron...

CVE-2026-82333

multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-28 发布INFO

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers t...

CVE-2026-82018

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the G

历史摘要 · 未重新核验 · NVD

#cve #cwe-636

漏洞预警2026-08-28 发布INFO

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrar...

CVE-2026-82017

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-08-28 发布INFO

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a...

CVE-2026-81533

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL state

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-08-28 发布INFO

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an...

CVE-2026-81532

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-08-28 发布INFO

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client ...

CVE-2026-81518

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-08-28 发布INFO

An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough routine connection log activity to exhaust the storage bac...

CVE-2026-81517

An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough r

历史摘要 · 未重新核验 · NVD

#cve #cwe-248

漏洞预警2026-08-28 发布INFO

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose eva...

CVE-2026-81490

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-28 发布INFO

multer is a middleware for handling multipart/form-data in Node.js. A small multipart request containing two specially crafted text field names can cause an uncaught RangeError ...

CVE-2026-77078

multer is a middleware for handling multipart/form-data in Node.js. A small multipart request containing two specially c

历史摘要 · 未重新核验 · NVD

#cve #cwe-248

漏洞预警2026-08-28 发布INFO

multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the fileSize limit, a race condition in mul...

CVE-2026-77063

multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-08-28 发布INFO

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream finishes, multer'...

CVE-2026-77037

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is abort

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-459

漏洞预警2026-08-28 发布INFO

A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests. Insufficient validation of an attacker-control...

CVE-2026-76651

A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-08-28 发布INFO

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigg...

CVE-2026-76650

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-28 发布INFO

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing une...

CVE-2026-76649

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action request

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-28 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance ...

CVE-2026-55763

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfe

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-08-28 发布INFO

Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain traceroute diagnostic logs via sending ...

CVE-2026-51665

Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Telnet service enablement status informatio...

CVE-2026-51664

Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger wireless scans and retrieve AP-client ...

CVE-2026-51663

Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at

历史摘要 · 未重新核验 · NVD

#cve