MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages,...
CVE-2026-85433
MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to rec
2026-09-04 归档
今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string...
CVE-2026-85437
MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust att
MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where...
CVE-2026-85438
MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where dimension, piece, and de
MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating...
CVE-2026-85434
MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. A
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on...
CVE-2026-85435
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allow
MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing,...
CVE-2026-85432
MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated att
MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client...
CVE-2026-85426
MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization.
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows...
CVE-2026-83711
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized...
CVE-2026-80098
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges
MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body...
CVE-2026-85429
MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it fr
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker...
CVE-2026-70352
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges
MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated...
CVE-2026-85424
MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect wit
MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS...
CVE-2026-85425
MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes
MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional...
CVE-2026-85428
MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that al
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown...
CVE-2026-85223
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown...
CVE-2026-85224
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an...
CVE-2026-62916
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevat
SiYuan: Absolute filesystem path and OS username disclosure via resolveAssetPath
CVE-2026-72802
**CVE:** This vulnerability corresponds to [CVE-2026-72802](https://nvd.nist.gov/vuln/detail/CVE-2026-72802). ### Summa
SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) brea...
CVE-2026-72811
**CVE:** This vulnerability corresponds to [CVE-2026-72811](https://nvd.nist.gov/vuln/detail/CVE-2026-72811). ### Summa
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an...
CVE-2026-85222
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of