2026-09-01 归档

今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。

漏洞预警2026-08-31 发布INFO

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_string_array of the file src/Common/opcua_types/sopc_built...

CVE-2026-82618

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_s

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-125

漏洞预警2026-08-31 发布INFO

A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::find_phone of the file /passwordrecover.php of the ...

CVE-2026-82615

A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Cust

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-31 发布INFO

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the compone...

CVE-2026-82614

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadR

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-31 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire raw submitted param map into an exception message, so sec...

CVE-2026-82727

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire

历史摘要 · 未重新核验 · NVD

#cve #cwe-209

漏洞预警2026-08-31 发布INFO

Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a craft...

CVE-2026-82726

Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash app

历史摘要 · 未重新核验 · NVD

#cve #cwe-178 #cwe-625

漏洞预警2026-08-31 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls filter form parameters filter across relationships the re...

CVE-2026-82725

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-31 发布INFO

Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the...

CVE-2026-82724

Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Prod...

CVE-2026-82613

A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultLi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=si...

CVE-2026-82612

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue i

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-31 发布INFO

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login...

CVE-2026-82611

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is th

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php o...

CVE-2026-82610

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employ

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit.php. The manipulation of the argument...

CVE-2026-82609

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-08-31 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can reach the admin LiveView exhaust the BEAM atom table and cra...

CVE-2026-82722

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can rea

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-31 发布INFO

Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's string primary key rewrite the target of AshAdmin's row-a...

CVE-2026-82681

Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's

历史摘要 · 未重新核验 · NVD

#cve #cwe-116

漏洞预警2026-08-31 发布INFO

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allows writing attacker-controlled bytes to arbitrary paths o...

CVE-2026-82673

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-31 发布INFO

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of the component AVP Ha...

CVE-2026-82608

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modul

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-125

漏洞预警2026-08-31 发布INFO

A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppb_ajax_simple_avatar of the file /wp-admin/admi...

CVE-2026-82607

A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the fu

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-08-31 发布INFO

A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads t...

CVE-2026-82605

A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the comp

历史摘要 · 未重新核验 · NVD

#cve #cwe-404 #cwe-835

漏洞预警2026-08-31 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_admin turns a record-lookup URL into an equality oracle over sensitive attributes. AshAdmin.He...

CVE-2026-81853

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_admin turns a record-lookup URL into a

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-31 发布INFO

Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script in an administrator's browser. The relationship typeahead...

CVE-2026-77850

Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script i

历史摘要 · 未重新核验 · NVD

#cve #cwe-79