IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject...
CVE-2026-9736
IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages
2026-09-04 归档
今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The...
CVE-2026-85208
A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the fun
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without...
CVE-2026-9745
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket owners
A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is...
CVE-2026-85207
A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of t
Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.
CVE-2026-85458
Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.
Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a...
CVE-2026-85053
Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates...
CVE-2026-9744
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validati
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the...
CVE-2026-8862
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code,
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates...
CVE-2026-9036
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validati
SiYuan: Cross-boundary metadata disclosure via getBlockInfo (publish mode): reader-reachable document title/root info for publish-forbidden docs; sibling getDocInfo is filtered
CVE-2026-68585
**CVE:** This vulnerability corresponds to [CVE-2026-68585](https://nvd.nist.gov/vuln/detail/CVE-2026-68585). ### Summa
SiYuan: Cross-boundary content disclosure via getBacklinkDoc/getBackmentionDoc (publish mode): reader-reachable rendered DOM of publish-forbidden docs; sibling list endpoints ar...
CVE-2026-68586
**CVE:** This vulnerability corresponds to [CVE-2026-68586](https://nvd.nist.gov/vuln/detail/CVE-2026-68586). ### Summa
SiYuan: Full-content disclosure of publish-disabled documents via getHeading*Transaction endpoints (publish mode): reader-reachable rendered DOM with no publish-access check
CVE-2026-68587
**CVE:** This vulnerability corresponds to [CVE-2026-68587](https://nvd.nist.gov/vuln/detail/CVE-2026-68587). ### Summa
toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization
CVE-2026-63376
### Summary `toml.parse()` writes attacker-controlled keys onto `Object.prototype`. The compiler protects the tables it
SiYuan: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure
CVE-2026-69086
**CVE:** This vulnerability corresponds to [CVE-2026-69086](https://nvd.nist.gov/vuln/detail/CVE-2026-69086). ### Summa
Phoenix: Unbounded channel joins per transport enables DoS over few connections
CVE-2026-56811
### Summary Phoenix transports do not limit the number of channels in a given connection, making it easy to spawn hundr
stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
CVE-2026-71429
## Description The path filters `pick`, `ignore`, `filter`, and `replace` — the library's headline "surgical extraction
amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload
CVE-2026-79921
**Summary** A vulnerability exists in the amqp091-go client library where a compromised or malicious AMQP broker can for
ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree
CVE-2026-63669
## Summary ApostropheCMS enforces per-type authorization on pages: a page type may declare `editRole` / `publishRole` (a
Material for MkDocs: DOM XSS in search suggestions via query parameter
CVE-2026-73295
### Impact Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optio
PatchBench: Evaluating AI Agents for Vulnerability Patching
该论文针对当前基于大语言模型/智能体（AI agent）的自动化漏洞修复评估中存在的两个关键有效性威胁展开研究。现有评估通常仅通过检查输入给定的概念验证（PoC）是否仍然触发崩溃来验证补丁是否有效，这种做法存在两个潜在问题：一是智能体可能只