关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
2026-09-12 归档
今日共收录 1637 条安全情报，包含 801 个 CVE，449 篇安全通告，以及 100 篇研究论文。
← 返回归档列表关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value...
CVE-2026-89268
QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist...
CVE-2026-89267
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an emp
An example environment-configuration file for a bundled inventory-management component ships with...
CVE-2026-90456
An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-know
A prior update that raised a bundled HTTP client library to a version remediating known...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later revert
The administrative password is hashed using a comparatively weak, fast algorithm for the...
CVE-2026-90457
The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one au
An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated...
CVE-2026-90460
An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 c
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host...
CVE-2026-90461
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is conf
An example environment-configuration file ships with a fixed, publicly-known secret value used to...
CVE-2026-90451
An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication co
A deployment mode intended to expose only read access to a bundled packet-analysis component's...
CVE-2026-90454
A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list o
stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook...
CVE-2026-89266
stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation s
A deployment mode intended to expose only read access to stored data proxies a set of application...
CVE-2026-90448
A deployment mode intended to expose only read access to stored data proxies a set of application programming interface
The application's role-authorization lookup defaults to granting access when a request handler's...
CVE-2026-90450
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in
A routing rule selects between two different authentication mechanisms for the same downstream...
CVE-2026-90447
A routing rule selects between two different authentication mechanisms for the same downstream service based on the valu
An application programming interface endpoint accepts a user-supplied value and interpolates it...
CVE-2026-90446
An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path o
A file-transfer interface that requires valid credentials accepts attacker-controlled filenames...
CVE-2026-90444
A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shel
An interface that accepts file uploads from authenticated users extracts the contents of uploaded...
CVE-2026-90445
An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without valid
@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)
CVE-2026-59149
## Summary A `FILE` response whose `filePath` embeds request data (e.g. `"/srv/public/{{queryParam 'name'}}"`, the docu
FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix
CVE-2026-59973
## Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI exte