2026-09-05 归档

今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix LE list UAF on reset hci_cc_reset() clears the LE accept and resolving lists with...

CVE-2026-80764

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix LE list UAF on reset hci

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate LE Set CIG Parameters response The Command Complete dispatch validates only ...

CVE-2026-80763

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate LE Set CIG Parameter

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix accept list UAF during suspend hci_update_event_filter_sync() walks hdev->accept_l...

CVE-2026-80762

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix accept list UAF during sus

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning it in getname iso_sock_getname() fills a struct sockaddr...

CVE-2026-80761

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 mgmt_hci_cmd_sync() checks that the message lengt...

CVE-2026-80760

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCI_CMD_SYNC params_len abo

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_aml: validate firmware segment lengths aml_download_firmware() reads two lengths from the fi...

CVE-2026-80759

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_aml: validate firmware segment lengt

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futex_private_hash_put() drops the reference to fph b...

CVE-2026-80758

In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final p

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and...

CVE-2026-79419

A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. T

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled inpu...

CVE-2026-79418

EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat funct

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can access mu...

CVE-2026-78970

JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An auth

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-04 发布INFO

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.15, 8.1 through 8.1.2.8, and 8.2 through 8.2.2.1 ...

CVE-2026-78658

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 throug

历史摘要 · 未重新核验 · NVD

#cve #cwe-212

漏洞预警2026-09-04 发布INFO

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to...

CVE-2026-78543

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-09-04 发布INFO

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer

CVE-2026-75429

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/proces

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component.

CVE-2026-75171

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling c

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

Cross-site scripting (XSS) vulnerability in the /loginController/doLogin endpoint of the HubCore platform (version 14.1.1) allows a remote unauthenticated attacker to inject arb...

CVE-2026-75170

Cross-site scripting (XSS) vulnerability in the /loginController/doLogin endpoint of the HubCore platform (version 14.1.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, o...

CVE-2026-5522

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-09-04 发布INFO

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to ...

CVE-2026-19649

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-09-04 发布INFO

IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause th...

CVE-2026-19645

IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-04 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material (secret_key, JWT sig...

CVE-2026-19306

IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesyste

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-04 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery.

CVE-2026-19305

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to server-side r

历史摘要 · 未重新核验 · NVD

#cve #cwe-918