2026-09-08 归档

今日共收录 1006 条安全情报,包含 268 个 CVE,456 篇安全通告,以及 21 篇研究论文。

← 返回归档列表
漏洞预警2026-09-07 发布INFO

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter pr...

CVE-2026-86430

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detectio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains quadratic parsing complexity in its SmartPunctExtension and AttributesExtension...

CVE-2026-86429

The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains quadratic parsing comp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can subm...

CVE-2026-86428

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by bre...

CVE-2026-86427

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric val...

CVE-2026-86426

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a crafted list of...

CVE-2026-86425

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decoder that allows attackers to bypass path policy write rest...

CVE-2026-86424

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can...

CVE-2026-86423

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList metho

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions b...

CVE-2026-86422

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows tha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing a...

CVE-2026-86421

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhau...

CVE-2026-86420

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. In feed processing, re...

CVE-2026-86419

Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organis...

CVE-2026-86418

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the sa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). The query always fetched User.email, while redaction happe...

CVE-2026-86417

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject() and updateGroupTypeObject() perform stat...

CVE-2026-86416

ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKeysController::view(). The vulnerable handler queried Cr...

CVE-2026-86408

Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/H...

CVE-2026-86306

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function Up...

CVE-2026-86305

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipul...

CVE-2026-86303

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component ...

CVE-2026-86302

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · NVD