2026-09-04 归档

今日共收录 1362 条安全情报,包含 399 个 CVE,552 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-09-03 发布INFO

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could ...

CVE-2026-74768

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could p...

CVE-2026-73600

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untrusted inode height value from on-disk metadata without bou...

CVE-2026-71224

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untru

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a ...

CVE-2026-71222

A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field from on-disk extended attribute m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, cau...

CVE-2026-71221

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode meta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode metadata is used as an array index without bounds checkin...

CVE-2026-71220

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk d...

CVE-2026-71219

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit...

CVE-2026-68860

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the Social Media Follow module in all versions up to, and in...

CVE-2026-3852

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ pa...

CVE-2026-2573

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerabl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced mes...

CVE-2026-17539

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including S...

CVE-2026-15933

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticated administrator can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Rejected reason: Red Hat Product Security has determined that this CVE ID is not needed

CVE-2026-15926

Rejected reason: Red Hat Product Security has determined that this CVE ID is not needed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.

CVE-2021-43614

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

CVE-2021-43613

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in run

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

HDD password plaintext is stored in a UEFI variable.

CVE-2021-38489

HDD password plaintext is stored in a UEFI variable.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec of the file crates/openfang-runtime/src/tool_runner.rs. Th...

CVE-2026-84888

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated ...

CVE-2026-84887

A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file gui_agents/s1/utils/ocr_server.py of the c...

CVE-2026-84886

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageDa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code_agent.py of the component CodeAgent. Such manipulation leads ...

CVE-2026-84885

A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code_agen

历史摘要 · 未重新核验 · NVD