2026-08-29 归档

今日共收录 1687 条安全情报,包含 687 个 CVE,604 篇安全通告,以及 114 篇研究论文。

← 返回归档列表
漏洞预警2026-08-28 发布INFO

A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's br...

CVE-2026-78615

A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions ...

CVE-2026-78614

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions ga...

CVE-2026-78613

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissi...

CVE-2026-78612

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global administrator's br...

CVE-2026-78610

WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed...

CVE-2026-78500

A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate exposed network se...

CVE-2026-78499

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network ...

CVE-2026-78498

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate expo...

CVE-2026-78495

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A Cross-Site Scripting (XSS) vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenticated administrator user to execute arbitrary JavaScript ...

CVE-2026-78195

A Cross-Site Scripting (XSS) vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and ...

CVE-2026-78174

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-priv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow stat...

CVE-2026-78103

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/...

CVE-2026-78047

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privile

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) cond...

CVE-2026-78008

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API use...

CVE-2026-61802

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through...

CVE-2026-38822

In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon (den...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint becaus...

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.

CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaus

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially cr...

CVE-2026-19318

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated a

历史摘要 · 未重新核验 · NVD