2026-09-08 归档

今日共收录 1006 条安全情报,包含 268 个 CVE,456 篇安全通告,以及 21 篇研究论文。

← 返回归档列表
漏洞预警2026-09-07 发布INFO

In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rules whose first path segment is a wild...

CVE-2026-84173

In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates mul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.

CVE-2026-77698

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. The preview performed correlation lookups against attributes from eve...

CVE-2026-86342

Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. The preview

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service ...

CVE-2026-86332

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?action=save_category. This manipulation ...

CVE-2026-86290

A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipu...

CVE-2026-86289

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/g

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nn_modules/qlinear/tritonv2.py of the component...

CVE-2026-86288

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/Attachmen...

CVE-2026-86285

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::ge

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Vulnerability involving incorrect access control in the Tools::getRemoteAddr() function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For...

CVE-2026-84186

Vulnerability involving incorrect access control in the Tools::getRemoteAddr() function in PrestaShop, which allows the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored ...

CVE-2026-18796

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to ov...

CVE-2026-14297

A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the func...

CVE-2026-86284

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src...

CVE-2026-86282

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a13

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation ...

CVE-2026-86281

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Thi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict_portal.sql. Suc...

CVE-2026-86280

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target...

CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative pat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

When using the Direct XIP update strategy, the main application image starts other cores (i.e. radio core), based on the currently active slot without additional verification. T...

CVE-2026-14296

When using the Direct XIP update strategy, the main application image starts other cores (i.e. radio core), based on the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_proc...

CVE-2026-86279

A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_subject...

CVE-2026-86278

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file delete_exam.php. The ...

CVE-2026-86277

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted

历史摘要 · 未重新核验 · NVD