2026-09-01 归档

今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。

漏洞预警2026-08-31 发布INFO

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener o...

CVE-2026-82810

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is th

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the function window.addEventListener of the component postMe...

CVE-2026-82809

A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impacted is an unknown function of the file dist/service-worker.production-esm.js ...

CVE-2026-82808

A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impacted is an unknown fu

历史摘要 · 未重新核验 · NVD

#cve #cwe-259 #cwe-798

漏洞预警2026-08-31 发布INFO

Incorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Smart QoS rules via sending a crafted POS...

CVE-2026-51724

Incorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-31 发布INFO

Incorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to install a custom CGI module via sending a cr...

CVE-2026-51723

Incorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to repoint the device to an attacker-controlled...

CVE-2026-51722

Incorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the mesh pairing state via sending a crafted P...

CVE-2026-51721

Incorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacker

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-31 发布INFO

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially craft...

CVE-2026-17615

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unaut

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-08-31 发布INFO

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a network packet it does not own. In the Zephyr TX path the ...

CVE-2026-14366

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a n

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-08-31 发布INFO

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1.

CVE-2026-83492

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-31 发布INFO

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-82814. Reason: This candidate is a reservation duplicate of CVE-2026-82814. Notes: All CVE u...

CVE-2026-82823

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-82814. Reason: This candidate is a

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-31 发布INFO

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This ma...

CVE-2026-82807

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the li

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-269

漏洞预警2026-08-31 发布INFO

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument clas...

CVE-2026-82805

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermai

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-08-31 发布INFO

A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_string_ELEMENT in the library struct2json/inc/s2jdef.h of the component JSON D...

CVE-2026-82803

A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_string_ELEMENT in the

历史摘要 · 未重新核验 · NVD

#cve #cwe-404 #cwe-476

漏洞预警2026-08-31 发布INFO

A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearchGranuleSearch/han...

CVE-2026-82802

A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLamb

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-31 发布INFO

The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated attacker on the a...

CVE-2026-77975

The affected Ebyte product exports administrative credentials and other sensitive configuration information without a

历史摘要 · 未重新核验 · NVD

#cve #cwe-312

漏洞预警2026-08-31 发布INFO

The affected Ebyte product does not provide separation between limited and administrative management functions. A low privileged authenticated attacker could access security...

CVE-2026-77966

The affected Ebyte product does not provide separation between limited and administrative management functions. A low

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-31 发布INFO

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL databas...

CVE-2026-75133

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-31 发布INFO

WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote authenticated user w...

CVE-2026-75132

WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GE

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-31 发布INFO

Incorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove URL filtering rules via sending a craf...

CVE-2026-51719

Incorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a

历史摘要 · 未重新核验 · NVD

#cve