2026-09-02 归档

今日共收录 1494 条安全情报,包含 600 个 CVE,479 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-09-01 发布INFO

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain precondition...

CVE-2026-73701

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site s...

CVE-2026-73700

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjace...

CVE-2026-19766

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Succ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulner...

CVE-2026-79687

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Retrieve Embedded Sensitive Data. This is...

CVE-2026-18931

Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating a...

CVE-2026-78012

An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) allows Code Injection. This issue ...

CVE-2026-18808

Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klem

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade ...

CVE-2026-18210

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technologica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thun...

CVE-2026-84121

Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Th...

CVE-2026-84119

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Fire

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending...

CVE-2026-51743

Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue...

CVE-2026-18765

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Teracity Software

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive excep...

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insuff...

CVE-2026-18550

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all ve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file...

CVE-2026-75865

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgat...

CVE-2026-83524

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/net_tr.cgi of the component CGI Script. This manipulat...

CVE-2026-82971

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of th...

CVE-2026-82954

A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.

CVE-2026-82226

Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions.

CVE-2026-81780

Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions.

历史摘要 · 未重新核验 · NVD