2026-09-16 归档

今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-09-15 发布INFO

Affected versions of MISP expose several state-changing controller actions without restricting them to POST. The affected actions are: - EventReportsController::purgeUnuse...

CVE-2026-91857

Affected versions of MISP expose several state-changing controller actions without restricting them to POST. The affec

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoint's display=wap consent page reflects request-derived val...

CVE-2026-62280

Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoin

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.2, WebAuthnAuthentication.deserialize applies an ObjectInputFilter that allows every serialized o...

CVE-2026-62263

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.2, WebAuthnAuthentication.deserialize ap

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-15 发布INFO

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.t...

CVE-2026-59341

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modif

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disable...

CVE-2026-53660

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the default configuration initializes

历史摘要 · 未重新核验 · NVD

#cve #cwe-1004 #cwe-1188 #cwe-1275

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a code_verifier only when the realm-wide codeVerifi...

CVE-2026-48717

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler req

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the private_key_jwt client authentication path uses ClientJwksResolverCache without reliably b...

CVE-2026-47426

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the private_key_jwt client authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scri...

CVE-2026-47424

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an a

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth2 authentication module updates an existing local account with profile attributes tha...

CVE-2026-46623

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth2 authentication module upda

历史摘要 · 未重新核验 · NVD

#cve #cwe-620 #cwe-1391

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, OAuthTokenStore reads caller-supplied token identifiers from the shared Core Token Store (CTS)...

CVE-2026-46498

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, OAuthTokenStore reads caller-supplied

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS...

CVE-2026-45794

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS c

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persis...

CVE-2026-45052

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receive

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, WebAuthnAuthentication loads a serialized AuthenticatorImpl object graph from the configured u...

CVE-2026-45051

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, WebAuthnAuthentication loads a serial

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privile...

CVE-2026-45048

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-285

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, certain federation endpoints in a non-default clustered configuration inconsistently encode us...

CVE-2026-44793

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, certain federation endpoints in a non

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect authorization endpoint does not sufficiently encode user-supp...

CVE-2026-44203

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect auth

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user to register an a...

CVE-2026-44202

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListene

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection() passes the _queryId parameter from /json/{realm}/users to...

CVE-2026-41573

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection()

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-09-15 发布INFO

The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources. This...

CVE-2026-19515

The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micr

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-15 发布INFO

The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an...

CVE-2025-5802

The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of use

历史摘要 · 未重新核验 · NVD

#cve #cwe-203