2026-09-16 归档

今日共收录 2620 条安全情报,包含 1789 个 CVE,446 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-15 发布INFO

Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the conver...

CVE-2026-80489

Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the G

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the conv...

CVE-2026-77117

Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText() before invo...

CVE-2026-57137

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/sandbox-executor.ts validates only the first whitespace-de...

CVE-2026-57136

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts uses buildEnv() o...

CVE-2026-57135

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator...

CVE-2026-57134

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/tools/utility-tools.ts checks only the first whitespace-de...

CVE-2026-57133

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 until 1.6.59 and PraisonAI 3.10.0 until 4.6.59, ToolsMCPServer.run_sse() in src/praisonai-agents/praisonaiage...

CVE-2026-57112

PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 until 1.6.59 and PraisonAI 3.10.0 until 4.6.59, Tool

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.58.0, ExportController::createExportTemplate() and ExportController::editExportTemplate() inherit only the class-le...

CVE-2026-52828

Kimai is an open-source time tracking application. Prior to 2.58.0, ExportController::createExportTemplate() and ExportC

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.57.0, GET or POST requests to /en/admin/project/{id}/rate/{rate}, /en/admin/customer/{id}/rate/{rate}, and /en/admi...

CVE-2026-52826

Kimai is an open-source time tracking application. Prior to 2.57.0, GET or POST requests to /en/admin/project/{id}/rate/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.58.0, POST /api/teams/{id}/members/{userId} and POST /api/teams/{id}/activities/{activityId} verify that a teamlead...

CVE-2026-52825

Kimai is an open-source time tracking application. Prior to 2.58.0, POST /api/teams/{id}/members/{userId} and POST /api/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APP_SECRET to the public value change_this_to_something_unique in Dockerfile, ...

CVE-2026-52824

Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APP_SECRET to the pub

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.58.0, TimesheetController exposes GET /api/timesheets/{id}/stop and GET /api/timesheets/{id}/restart, which reuse a...

CVE-2026-52823

Kimai is an open-source time tracking application. Prior to 2.58.0, TimesheetController exposes GET /api/timesheets/{id}

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.58.0, PATCH /api/timesheets/{id}/restart, PATCH /api/timesheets/{id}/duplicate, and the web duplicate workflow can ...

CVE-2026-52822

Kimai is an open-source time tracking application. Prior to 2.58.0, PATCH /api/timesheets/{id}/restart, PATCH /api/times

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.57.0, GET or POST requests to /en/admin/activity/create/{project} and /en/admin/project/create/{customer} require o...

CVE-2026-52821

Kimai is an open-source time tracking application. Prior to 2.57.0, GET or POST requests to /en/admin/activity/create/{p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.57.0, PATCH /api/timesheets/{id} and POST /api/timesheets accept a user-controlled project identifier through Times...

CVE-2026-52820

Kimai is an open-source time tracking application. Prior to 2.57.0, PATCH /api/timesheets/{id} and POST /api/timesheets

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.57.0, the GET /api/timesheets list endpoint accepts user and users[] target identifiers from a caller with view_oth...

CVE-2026-52819

Kimai is an open-source time tracking application. Prior to 2.57.0, the GET /api/timesheets list endpoint accepts user a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 11.5;0, 11.4.62551...

CVE-2026-1759

Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escala

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version ...

CVE-2026-1758

Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects Ga

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception. Because CakeErrorController extends AppController, exception render...

CVE-2026-91859

Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception. Because Ca

历史摘要 · 未重新核验 · NVD