2026-09-02 归档

今日共收录 1494 条安全情报，包含 600 个 CVE，479 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-09-01 发布INFO

A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existin...

CVE-2024-14047

A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by u

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-09-01 发布INFO

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of...

CVE-2024-10085

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-01 发布INFO

A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a resta...

CVE-2026-84235

A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet be

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-01 发布INFO

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could expl...

CVE-2026-84149

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git

历史摘要 · 未重新核验 · NVD

#cve #cwe-527

漏洞预警2026-09-01 发布INFO

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this ...

CVE-2026-84148

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoin

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-01 发布INFO

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker c...

CVE-2026-84147

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-09-01 发布INFO

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-r...

CVE-2026-84145

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs s

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-09-01 发布INFO

Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we pr...

CVE-2026-84144

Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-r...

CVE-2026-84143

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs s

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough eff...

CVE-2026-84142

Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another sec

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84141

Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Th

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84140

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, T

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84139

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunder

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.

CVE-2026-84138

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84137

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunde

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84136

Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbir

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.

CVE-2026-84135

Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84134

Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84133

Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-01 发布INFO

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84132

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2

历史摘要 · 未重新核验 · NVD

#cve