2026-09-05 归档

今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data struct...

CVE-2026-64199

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes past the end of an allocated heap ...

CVE-2026-64198

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Succ...

CVE-2026-64197

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exp...

CVE-2026-64196

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to op...

CVE-2026-64195

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Success

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-03 发布INFO

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omissio...

CVE-2026-9745

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket owners

历史摘要 · 未重新核验 · NVD

#cve #cwe-283

漏洞预警2026-09-03 发布INFO

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive inf...

CVE-2026-9744

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validati

历史摘要 · 未重新核验 · NVD

#cve #cwe-297

漏洞预警2026-09-03 发布INFO

IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when w...

CVE-2026-9736

IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages

历史摘要 · 未重新核验 · NVD

#cve #cwe-117

漏洞预警2026-09-03 发布INFO

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. ...

CVE-2026-8862

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code,

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-09-03 发布INFO

Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.

历史摘要 · 未重新核验 · NVD

#cve #cwe-369

漏洞预警2026-09-03 发布INFO

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of the file /rider/orders/controller.php?a...

CVE-2026-85208

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the fun

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-09-03 发布INFO

node-csv is a full-featured CSV parser with a simple API that is tested against large datasets. Prior to 7.0.2, csv-parse with the columns and group_columns_by_name options enab...

CVE-2026-85063

node-csv is a full-featured CSV parser with a simple API that is tested against large datasets. Prior to 7.0.2, csv-pars

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-09-03 发布INFO

A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE) standards. The issue occurs when the library verifies a ...

CVE-2026-84185

A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE)

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-09-03 发布INFO

parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes i...

CVE-2026-82520

parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed

历史摘要 · 未重新核验 · NVD

#cve #cwe-409

漏洞预警2026-09-03 发布INFO

toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse() uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js whose peg$parsevalue,...

CVE-2026-77465

toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse() uses a Peggy 5.1.0 generated recurs

历史摘要 · 未重新核验 · NVD

#cve #cwe-674

漏洞预警2026-09-03 发布INFO

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and rep...

CVE-2026-71429

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior

历史摘要 · 未重新核验 · NVD

#cve #cwe-407

漏洞预警2026-09-03 发布INFO

toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse() in lib/compiler.js can be tricked by a table path such as a.b.y.proto.proto, allowin...

CVE-2026-63376

toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse() in lib/compiler.js can be tricked b

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-09-03 发布INFO

A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of t...

CVE-2026-85207

A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-03 发布INFO

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-85046

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

#cve #cwe-843

漏洞预警2026-09-03 发布INFO

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via ...

CVE-2026-85044

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker lever

历史摘要 · 未重新核验 · NVD

#cve #cwe-672