2026-09-04 归档

今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-09-03 发布INFO

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stac...

CVE-2026-84851

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated a

历史摘要 · 未重新核验 · NVD

#cve #cwe-674

漏洞预警2026-09-03 发布INFO

fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an opening bracket but does not end with a...

CVE-2026-84394

fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host th

历史摘要 · 未重新核验 · NVD

#cve #cwe-436

漏洞预警2026-09-02 发布INFO

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrol...

CVE-2026-84857

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the c

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-789

漏洞预警2026-09-02 发布INFO

A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file apps/rowboat/app/api/composio/webhook/rou...

CVE-2026-84856

A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.j

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-09-02 发布INFO

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File...

CVE-2026-84852

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-02 发布INFO

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cli_api.py compo...

CVE-2026-84452

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prio

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-942

漏洞预警2026-09-02 发布INFO

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated ...

CVE-2026-84292

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and

历史摘要 · 未重新核验 · NVD

#cve #cwe-116

漏洞预警2026-09-02 发布INFO

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload e...

CVE-2026-82524

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to uplo

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-09-02 发布INFO

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the ent...

CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-02 发布INFO

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after th...

CVE-2026-75137

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recov

历史摘要 · 未重新核验 · NVD

#cve #cwe-316

漏洞预警2026-09-02 发布INFO

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows P...

CVE-2026-75136

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-09-02 发布INFO

SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenticated contributors to inject malicious JavaScript by expl...

CVE-2026-75134

SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-02 发布INFO

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel mes...

CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the e

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-02 发布INFO

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.

CVE-2023-20577

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI fl

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-02 发布INFO

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.

CVE-2023-20576

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially result

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-09-02 发布INFO

A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-...

CVE-2026-84841

A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The m

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-09-02 发布INFO

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the component Bootstrap Setup Endpoint. ...

CVE-2026-84840

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file Intercepti

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-02 发布INFO

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xml of the component Admin Console/DPO ...

CVE-2026-84839

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionalit

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-02 发布INFO

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_decoders.py fully inflate each gzip, deflate, br, or zstd ...

CVE-2026-84382

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_d

历史摘要 · 未重新核验 · NVD

#cve #cwe-409

漏洞预警2026-09-02 发布INFO

A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages...

CVE-2026-84833

A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-404