2026-09-11 归档

今日共收录 1356 条安全情报,包含 483 个 CVE,489 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections.

CVE-2026-88286

GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash th...

CVE-2026-88284

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated ad

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and cras...

CVE-2026-88283

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-acco...

CVE-2026-88282

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be execute

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash t...

CVE-2026-88281

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker.

CVE-2026-88280

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF wor...

CVE-2026-88279

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.

CVE-2026-88277

GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root.

CVE-2026-88276

GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied.

CVE-2026-88275

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary comma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.

CVE-2026-88274

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.

CVE-2026-88273

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration ass

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is late...

CVE-2026-88272

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR.

CVE-2026-88271

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.

CVE-2026-88270

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR.

CVE-2026-88269

GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service.

CVE-2026-88268

GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a val

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A flaw was found in crun. After pivot_root, reopening /dev/null for stdio can follow a symlink and attach a host file to container stdio, then change that file's ownership. Affe...

CVE-2026-88265

A flaw was found in crun. After pivot_root, reopening /dev/null for stdio can follow a symlink and attach a host file to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, inclu...

CVE-2026-88264

A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload...

CVE-2026-84042

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun

历史摘要 · 未重新核验 · NVD