2026-09-08 归档

今日共收录 1006 条安全情报，包含 268 个 CVE，456 篇安全通告，以及 21 篇研究论文。

← 返回归档列表

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. A low pri...

CVE-2026-80178

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions v...

CVE-2026-80135

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauth...

CVE-2026-80134

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticat...

CVE-2026-80133

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-07 发布INFO

ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerabili...

CVE-2026-80132

ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-07 发布INFO

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP acc...

CVE-2026-79678

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a

历史摘要 · 未重新核验 · NVD

#cve #cwe-95

漏洞预警2026-09-07 发布INFO

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biograp...

CVE-2026-6431

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-07 发布INFO

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and in...

CVE-2026-4945

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Insec

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-07 发布INFO

The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. This is due to the plugin not properly verifying that a user...

CVE-2026-12853

The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. Thi

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-07 发布INFO

PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title length. A player who obtains a writable book can create over...

CVE-2022-51018

PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title len

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-07 发布INFO

PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG_String...

CVE-2022-51017

PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, all

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-07 发布INFO

PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corres...

CVE-2022-51016

PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so the server cannot verify

历史摘要 · 未重新核验 · NVD

#cve #cwe-294

漏洞预警2026-09-07 发布INFO

PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK actions) or in UseItemTransactionData (typically within Invento...

CVE-2022-51015

PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK action

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-07 发布INFO

PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when processing malformed JSON from clients. Attackers can send s...

CVE-2022-51014

PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when pro

历史摘要 · 未重新核验 · NVD

#cve #cwe-248

漏洞预警2026-09-07 发布INFO

PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative or out-of-range da...

CVE-2022-51013

PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received fro

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-07 发布INFO

PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers can send crafted inv...

CVE-2022-51012

PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transac

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-07 发布INFO

PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by newline characters, allowing attackers to send large messa...

CVE-2022-51011

PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by n

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-07 发布INFO

PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range t...

CVE-2022-51010

PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-07 发布INFO

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject() uses ObjectInputStreamWithClassLoader, which implements allow-list/bloc...

CVE-2026-86404

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject() uses ObjectInp

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-07 发布INFO

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component P...

CVE-2026-86301

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94