2026-09-05 归档

今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-09-04 发布INFO

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticat...

CVE-2026-17443

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-09-04 发布INFO

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to ...

CVE-2026-17442

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-09-04 发布INFO

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to ...

CVE-2026-17440

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-674

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds.

CVE-2026-17274

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predicta

历史摘要 · 未重新核验 · NVD

#cve #cwe-330

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference.

CVE-2026-17273

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL poin

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow.

CVE-2026-17270

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overf

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.

CVE-2026-17259

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-bas

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow.

CVE-2026-17207

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions.

CVE-2026-17057

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization.

CVE-2026-16941

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper au

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching.

CVE-2026-16892

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-16826

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization o

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encrypt...

CVE-2026-16693

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-09-04 发布INFO

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to ...

CVE-2026-16689

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-09-04 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

CVE-2026-16660

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bound

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-04 发布INFO

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authentic...

CVE-2026-16180

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-776

漏洞预警2026-09-04 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request contain...

CVE-2026-14470

IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An at

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-04 发布INFO

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elemen...

CVE-2026-14350

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log

历史摘要 · 未重新核验 · NVD

#cve #cwe-117

漏洞预警2026-09-04 发布INFO

IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.

CVE-2026-13297

IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.

历史摘要 · 未重新核验 · NVD

#cve #cwe-1336

漏洞预警2026-09-04 发布INFO

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop when a value inside an array or inline table is followed b...

CVE-2026-85730

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop w

历史摘要 · 未重新核验 · NVD

#cve #cwe-606 #cwe-835