2026-08-29 归档

今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。

← 返回归档列表

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtd_info contains a struct device,...

CVE-2026-80597

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control interface When the driver was converted to use the...

CVE-2026-80596

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on co

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without ...

CVE-2026-80595

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The dr

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union de...

CVE-2026-80594

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before accessing element atk_ec_present() walks the management gr...

CVE-2026-80593

In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before ac

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on top of `struct damon...

CVE-2026-80592

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range pa

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields ...

CVE-2026-80591

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr ent

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtio_net_hdr (tun/tap, or AF_PACKET with ...

CVE-2026-80590

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been ...

CVE-2026-79996

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its lo

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-08-28 发布INFO

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the r...

CVE-2026-79995

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email c

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-28 发布INFO

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthentica...

CVE-2026-79706

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to buil

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-08-28 发布INFO

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing u...

CVE-2026-79615

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question ba

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-28 发布INFO

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.

CVE-2026-78238

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-28 发布INFO

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.

CVE-2026-77838

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-28 发布INFO

The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund...

CVE-2026-77701

The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns t

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-28 发布INFO

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.

CVE-2026-73827

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-28 发布INFO

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in versions up to and includ...

CVE-2026-6286

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Script

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-28 发布INFO

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escapi...

CVE-2026-5097

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to,

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-28 发布INFO

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advanced Search REST endpoint in all versions up to, and inclu...

CVE-2026-4246

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advan

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-28 发布INFO

The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot resolve the set of roles a profile form permits, and screens the ...

CVE-2026-19423

The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot resolve

历史摘要 · 未重新核验 · NVD

#cve #cwe-269