2026-09-02 归档

今日共收录 1494 条安全情报,包含 600 个 CVE,479 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-09-01 发布INFO

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow a local attacker ...

CVE-2026-73713

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain precondit...

CVE-2026-73712

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to gain...

CVE-2026-73711

A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitatio...

CVE-2026-73710

Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying...

CVE-2026-73709

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adja

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to obtain el...

CVE-2026-73708

A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to comp...

CVE-2026-73707

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certa...

CVE-2026-73706

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain li

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate privileges. Successful ex...

CVE-2026-73705

An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low priv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate t...

CVE-2026-73704

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting...

CVE-2026-73703

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to esc...

CVE-2026-73702

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only...

CVE-2026-72682

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An operation available...

CVE-2026-72654

Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature can lead to information disclosur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a...

CVE-2026-72652

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586). A specially craft...

CVE-2026-72649

Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code exec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Uncaught Exception (CWE-248) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only the low-privileged feature acc...

CVE-2026-72644

Uncaught Exception (CWE-248) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticate...

CVE-2026-72641

Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality No

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Incorrect Authorization (CWE-863) in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An...

CVE-2026-72633

Incorrect Authorization (CWE-863) in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing Fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Improper Handling of Highly Compressed Data (CWE-409) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding Streams manag...

CVE-2026-72628

Improper Handling of Highly Compressed Data (CWE-409) in Kibana can lead to a denial of service via Excessive Allocation

历史摘要 · 未重新核验 · NVD