2026-09-04 归档

今日共收录 1362 条安全情报,包含 399 个 CVE,552 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-09-03 发布INFO

MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom configuration) flow. When a user was successfully authenticated through CustomAuth, MIS...

CVE-2026-85238

MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom configuration) flow. When a us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability in MISP's email-based one-time password (OTP) authentication flow allowed an attacker to perform an unrestricted number of OTP verification attempts. The email...

CVE-2026-85237

A vulnerability in MISP's email-based one-time password (OTP) authentication flow allowed an attacker to perform an unre

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed a state-changing and irreversible operation while accepti...

CVE-2026-85236

A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argum...

CVE-2026-85138

A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf of the file seacms_locoy_news.php of the component Locoy Collector. The manipu...

CVE-2026-85137

A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf of the file seacms_lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the ext...

CVE-2026-84967

A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection strin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly. When an applicatio...

CVE-2026-84966

An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a lengt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes t...

CVE-2026-84965

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the h...

CVE-2026-84964

A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the cor...

CVE-2026-84963

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusua

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity,...

CVE-2026-84962

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read ...

CVE-2026-83961

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding m...

CVE-2026-82525

Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to rea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the manage...

CVE-2026-75036

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal ow...

CVE-2026-75035

A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so eac...

CVE-2026-75034

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a...

CVE-2026-71963

Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba9...

CVE-2026-57445

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In 3e595...

CVE-2026-55658

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. Prior to...

CVE-2026-53924

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit

历史摘要 · 未重新核验 · NVD