2026-09-04 归档
今日共收录 1362 条安全情报,包含 399 个 CVE,552 篇安全通告,以及 120 篇研究论文。
← 返回归档列表 漏洞预警2026-09-03 发布INFO
CVE-2026-85238
MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom configuration) flow. When a us
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-85237
A vulnerability in MISP's email-based one-time password (OTP) authentication flow allowed an attacker to perform an unre
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-85236
A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-85138
A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-85137
A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf of the file seacms_lo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-84967
A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection strin
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-84966
An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a lengt
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-84965
An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-84964
A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-84963
An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusua
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-84962
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-83961
ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacke
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-82525
Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to rea
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-75036
A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet co
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-75035
A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user,
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-75034
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recor
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-71963
Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-57445
Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-55658
Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2026-53924
Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit
历史摘要 · 未重新核验 · NVD