2026-09-05 归档

今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-09-04 发布INFO

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to versi...

CVE-2026-80181

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: thr

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-04 发布INFO

Stored XSS via markdown HTML processing in Apache Allura. This issue affects Apache Allura: from through 1.20.0. Users are recommended to upgrade to version 1.21.0, which ...

CVE-2026-80180

Stored XSS via markdown HTML processing in Apache Allura. This issue affects Apache Allura: from through 1.20.0. U

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-04 发布INFO

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients a...

CVE-2026-79632

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in sub

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-04 发布INFO

The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public uploads directory, allowing unauthen...

CVE-2026-79631

The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable locat

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-04 发布INFO

The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bump's discount was configured for, al...

CVE-2026-79630

The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump i

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-04 发布INFO

The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with the author role and above to read arbitrary fi...

CVE-2026-74853

The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing

历史摘要 · 未重新核验 · NVD

#cve #cwe-552

漏洞预警2026-09-04 发布INFO

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect....

CVE-2026-71216

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over H

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-09-04 发布INFO

XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked.

CVE-2026-66840

XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sens

历史摘要 · 未重新核验 · NVD

#cve #cwe-497

漏洞预警2026-09-04 发布INFO

The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a...

CVE-2026-19224

The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administ

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-04 发布INFO

The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers ...

CVE-2026-17517

The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-04 发布INFO

The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listing before its AI image-editing AJAX action deletes or atta...

CVE-2026-16281

The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listin

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-04 发布INFO

The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a...

CVE-2025-15691

The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before cre

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-04 发布INFO

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short resp...

CVE-2026-85505

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipm

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-04 发布INFO

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Serv...

CVE-2026-85409

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireSer

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-04 发布INFO

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations/<ID>/events of the component Co...

CVE-2026-85408

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-

历史摘要 · 未重新核验 · NVD

#cve #cwe-913 #cwe-915

漏洞预警2026-09-04 发布INFO

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations/<ID>/events of the compon...

CVE-2026-85407

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /en

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-09-04 发布INFO

A vulnerability has been found in Eleveo Quality Management 9.7.0. This vulnerability affects unknown code of the component Conversation Review. The manipulation leads to cross ...

CVE-2026-85406

A vulnerability has been found in Eleveo Quality Management 9.7.0. This vulnerability affects unknown code of the compon

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-04 发布INFO

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/...

CVE-2026-85405

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAdd

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-04 发布INFO

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument fi...

CVE-2026-85403

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-04 发布INFO

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the ar...

CVE-2026-85402

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89