2026-09-05 归档

今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace iommufd_hwpt_replace_device() cal...

CVE-2026-80894

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix wrong hwpt passed to iommufd_auto_resp

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() copy_hugetlb_page_range() clears the ...

CVE-2026-80893

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: erofs: cap LZMA stream pool size fs/erofs/decompressor_lzma.c sizes the module-global MicroLZMA stream pool...

CVE-2026-80892

In the Linux kernel, the following vulnerability has been resolved: erofs: cap LZMA stream pool size fs/erofs/decompre

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector f...

CVE-2026-80891

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinni

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctp_unpack_cookie() skips cookie expiration c...

CVE-2026-80890

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verifica

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and tx_gen ordering This patch is a follow-up to commit ...

CVE-2026-80889

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dma_buf reference on foreign-fd prime import ttm_prime_fd_to_handle() returns -ENOSYS when...

CVE-2026-80888

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dma_buf reference on foreign-fd pr

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supp...

CVE-2026-80887

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

Emlog is an open source website building system. In versions 2.6.29 and prior, tag names in emlog are not HTML-encoded when rendered in the article editor. An attacker can creat...

CVE-2026-73848

Emlog is an open source website building system. In versions 2.6.29 and prior, tag names in emlog are not HTML-encoded w

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-04 发布INFO

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, an authenticated user can view the API request history of any other user's API tokens within the same ...

CVE-2026-61688

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, an authenticated user can view the API reques

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-04 发布INFO

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the `DataGrid` LiveComponent deserializes a `context` prop value using PHP's `unserialize()` after rec...

CVE-2026-61686

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the `DataGrid` LiveComponent deserializes a `

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-04 发布INFO

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the REST API authenticator accepts bearer tokens via a `?token=` URL query parameter as a fallback to ...

CVE-2026-61614

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the REST API authenticator accepts bearer tok

历史摘要 · 未重新核验 · NVD

#cve #cwe-598

漏洞预警2026-09-04 发布INFO

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, `UserInvitation` entities have no expiry timestamp. Invitation links mailed to users remain valid inde...

CVE-2026-61608

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, `UserInvitation` entities have no expiry time

历史摘要 · 未重新核验 · NVD

#cve #cwe-613

漏洞预警2026-09-04 发布INFO

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end whe...

CVE-2026-57166

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer o

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-04 发布INFO

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end whe...

CVE-2026-57165

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer o

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-04 发布INFO

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client....

CVE-2026-57164

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer ov

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-04 发布INFO

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the...

CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer o

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-04 发布INFO

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when proc...

CVE-2026-57162

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer o

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-04 发布INFO

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route hea...

CVE-2026-57161

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer o

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-04 发布INFO

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in pjsip/s...

CVE-2026-57160

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflo

历史摘要 · 未重新核验 · NVD

#cve #cwe-193