2026-09-06 归档

今日共收录 918 条安全情报,包含 147 个 CVE,434 篇安全通告,以及 81 篇研究论文。

← 返回归档列表
安全公告2026-09-06 发布INFO

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an...

CVE-2026-86161

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-06 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-76160

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-06 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-76161

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-06 发布INFO

A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown...

CVE-2026-86150

A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

A vulnerability in the N-central internal API access control filter allows unauthorised access to...

CVE-2026-86206

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

In BPF instructions that load/store a value from/to a scratch memory register the register index...

CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal...

CVE-2026-86207

An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid...

CVE-2026-31911

libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular unco

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the...

CVE-2026-6244

libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zer

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or...

CVE-2026-18313

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received fro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack...

CVE-2026-31912

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instructio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server...

CVE-2026-18238

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its heade

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to...

CVE-2026-6554

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via bac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that...

CVE-2026-86197

Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and ad

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the...

CVE-2026-86192

SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys end

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the...

CVE-2026-86195

grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the InvitationsController where t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

WWBN AVideo generates passwords for external-login accounts using rand() instead of a...

CVE-2026-86187

WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header...

CVE-2026-86196

Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header in the forgot-password

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name...

CVE-2026-86194

Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name across pages, allowing an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

grav-plugin-api before 1.0.20 fails to validate group-inherited super permissions in user...

CVE-2026-86193

grav-plugin-api before 1.0.20 fails to validate group-inherited super permissions in user-management guards, allowing no

历史摘要 · 未重新核验 · GitHub Advisory