2026-09-02 归档

今日共收录 1494 条安全情报，包含 600 个 CVE，479 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-09-01 发布INFO

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this ...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated use

历史摘要 · 未重新核验 · NVD

#cve #cwe-829

漏洞预警2026-09-01 发布INFO

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc...

CVE-2026-55951

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server.

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-01 发布INFO

Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery. This issu...

CVE-2026-18780

Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Manageme

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-01 发布INFO

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. Thi...

CVE-2026-18771

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industri

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-01 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Sof...

CVE-2026-18630

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Indust

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-01 发布INFO

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP...

CVE-2026-9637

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-09-01 发布INFO

A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more ...

CVE-2026-9634

A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directorie

历史摘要 · 未重新核验 · NVD

#cve #cwe-276

漏洞预警2026-09-01 发布INFO

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more...

CVE-2026-9633

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directori

历史摘要 · 未重新核验 · NVD

#cve #cwe-276

漏洞预警2026-09-01 发布INFO

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash,...

CVE-2026-9625

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded messag

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-09-01 发布INFO

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation,...

CVE-2026-9624

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic ser

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-09-01 发布INFO

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service to crash, requir...

CVE-2026-9622

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close servi

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-09-01 发布INFO

A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLin...

CVE-2026-9621

A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a m

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-09-01 发布INFO

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitig...

CVE-2026-84218

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service

历史摘要 · 未重新核验 · NVD

#cve #cwe-184

漏洞预警2026-09-01 发布INFO

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/webmainAction.php. Executing a manipulat...

CVE-2026-84109

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-01 发布INFO

A vulnerability in Hugging Face Transformers (versions >= 4.49.0 and <= 5.8.1) allows remote Python files to be written to local disk without user consent when using GenerativeP...

CVE-2026-80047

A vulnerability in Hugging Face Transformers (versions >= 4.49.0 and <= 5.8.1) allows remote Python files to be written

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass acces...

CVE-2026-79684

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges cou

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-09-01 发布INFO

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code wit...

CVE-2026-58572

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-01 发布INFO

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary c...

CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could pote

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-01 发布INFO

Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reboot the local device and, on a master, fan out ...

CVE-2026-51766

Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-01 发布INFO

Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to insert or replace mesh neighbor records vi...

CVE-2026-51765

Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticate

历史摘要 · 未重新核验 · NVD

#cve