2026-09-01 归档

今日共收录 1266 条安全情报,包含 424 个 CVE,451 篇安全通告,以及 107 篇研究论文。

← 返回归档列表
漏洞预警2026-08-31 发布INFO

Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803. Fetcher.build_request() in libs/fetcher.py constructs an httpclient.HTTPRequest fro...

CVE-2026-51152

Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803. Fetcher.build_request() in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper ha...

CVE-2026-21827

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/handler.js of the co...

CVE-2026-82801

A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component asp_setPing Endpoint. Perfo...

CVE-2026-82703

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component asp_WlanMP Endpoint. Such manipulation of th...

CVE-2026-82702

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search ...

CVE-2026-82701

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedeskto...

CVE-2026-78422

Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to install and...

CVE-2026-66047

ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerabi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-63083

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter IPTV service configuration via sending a craft...

CVE-2026-51697

Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose internal services via sending a craf...

CVE-2026-51696

Incorrect access control in the setPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter dynamic DNS state via sending a crafted POST r...

CVE-2026-51695

Incorrect access control in the setDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to add or change static DHCP rules via sending ...

CVE-2026-51694

Incorrect access control in the setStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to establish or weaken guest wireless access via s...

CVE-2026-51692

Incorrect access control in the setWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulate the upload or flash workflow via se...

CVE-2026-51691

Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter upstream provisioning and connectivity via send...

CVE-2026-51690

Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setUpgradeFW function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger firmware-upgrade workflow changes via send...

CVE-2026-51689

Incorrect access control in the setUpgradeFW function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reduce wireless power or cause a Denial of Ser...

CVE-2026-51688

Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to create or weaken guest wireless access via s...

CVE-2026-51687

Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure or disable wireless networks via sen...

CVE-2026-51686

Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

历史摘要 · 未重新核验 · NVD