2026-09-11 归档

今日共收录 1356 条安全情报,包含 483 个 CVE,489 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-10 发布INFO

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog object...

CVE-2026-87107

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authoriz...

CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog r...

CVE-2026-87090

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Concrete CMS versions 8.3.0 through 9.5.2 are vulnerable to an authorization bypass in the Calendar event edit dialog (concrete/controllers/dialog/event/edit.php). The dialog ch...

CVE-2026-68527

Concrete CMS versions 8.3.0 through 9.5.2 are vulnerable to an authorization bypass in the Calendar event edit dialog (c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attacke...

CVE-2026-89046

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attack...

CVE-2026-89045

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.rea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, all...

CVE-2026-89044

Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with ...

CVE-2026-89043

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store met...

CVE-2026-88055

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-...

CVE-2026-88054

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rej

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets...

CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intprot

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound a...

CVE-2026-88052

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharse

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields r...

CVE-2026-88051

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/cc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be int...

CVE-2026-88031

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be i...

CVE-2026-88030

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be...

CVE-2026-88029

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB integration for Laravel can cause a caller-supplied relation ...

CVE-2026-88028

Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB inte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a caller-supplied emb...

CVE-2026-88027

Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoD

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied character sequence to a...

CVE-2026-88026

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# D

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cause a caller-supplied structured file identifier to be int...

CVE-2026-88025

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cau

历史摘要 · 未重新核验 · NVD