2026-09-09 归档

今日共收录 1483 条安全情报,包含 593 个 CVE,506 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
漏洞预警2026-09-08 发布INFO

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness, resulting in a to...

CVE-2026-62646

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), ...

CVE-2026-58113

A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC ...

CVE-2026-34223

A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.

CVE-2026-84820

Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

CVE-2026-84818

Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.

CVE-2026-84817

Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09.

CVE-2026-81806

Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. Th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.

CVE-2026-81802

Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointmen...

CVE-2026-81798

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Unauthenticated Privilege Escalation in Product Catalog Enquiry for WooCommerce by MultiVendorX <= 6.1.4 versions.

CVE-2026-81792

Unauthenticated Privilege Escalation in Product Catalog Enquiry for WooCommerce by MultiVendorX <= 6.1.4 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels. Th...

CVE-2026-81790

Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbo...

CVE-2026-81781

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile conte...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 1...

CVE-2026-71375

Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0.

CVE-2026-48888

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of the component Backup File Handler. Th...

CVE-2026-86519

A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /car

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to ...

CVE-2026-86518

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipula...

CVE-2026-86517

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role....

CVE-2026-86516

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/meta/txtp_parser.c of the component txtp. Such manipulati...

CVE-2026-86515

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/

历史摘要 · 未重新核验 · NVD