2026-09-11 归档

今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display ...

CVE-2026-81940

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.

CVE-2026-81554

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage due to a path traversal vulnera...

CVE-2026-81551

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write to or delet

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an O...

CVE-2026-81550

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability.

CVE-2026-81540

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belon

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API...

CVE-2026-81268

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive

历史摘要 · 未重新核验 · NVD

#cve #cwe-613

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5.

CVE-2026-81265

IBM Langflow OSS 1.0.0 through 1.11.5.

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation of user-supplied U...

CVE-2026-81213

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal networ

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored f...

CVE-2026-81211

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due t

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format path on the shared /ds-storage RWX PVC and returns the file with no p...

CVE-2026-81210

IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format path on the

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch orig...

CVE-2026-81207

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct obje...

CVE-2026-80434

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote attacker to perform unauthorized actions due to cross-site request forgery.

CVE-2026-80380

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote attacker to perform unauthorized actions due to cross-s

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper authorization.

CVE-2026-80378

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist.

CVE-2026-79742

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an in

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control.

CVE-2026-79725

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to imprope

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-controlled API endpoints.

CVE-2026-79723

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-10 发布INFO

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the pars...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP s...

CVE-2026-78575

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to i

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call on attacker-controlled input.

CVE-2026-78571

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an un

历史摘要 · 未重新核验 · NVD

#cve #cwe-94