2026-09-04 归档

今日共收录 1362 条安全情报,包含 399 个 CVE,552 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-09-03 发布INFO

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap memory by sending UD...

CVE-2026-85436

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying ...

CVE-2026-85432

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send craft...

CVE-2026-85431

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODE_MESSAG...

CVE-2026-85429

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it fr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a cra...

CVE-2026-85427

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function AuthCon...

CVE-2026-85378

A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of the file cmd/api/src/api/registration/v2.go of the componen...

CVE-2026-85241

A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient_login.php. The manipulation of the ar...

CVE-2026-85225

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

CVE-2026-70178

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.

CVE-2026-69857

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

CVE-2026-65818

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.

CVE-2026-62906

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA p...

CVE-2026-18330

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who capt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that caus...

CVE-2026-18167

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read a past the end of an allocated heap buffer dur...

CVE-2026-64200

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read outside the bounds of an allocated data struct...

CVE-2026-64199

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read a few bytes past the end of an allocated heap ...

CVE-2026-64198

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Succ...

CVE-2026-64197

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exp...

CVE-2026-64196

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to op...

CVE-2026-64195

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Success

历史摘要 · 未重新核验 · NVD