2026-09-16 归档

今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-09-15 发布INFO

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown functionality of the file /update_requirement_status.php....

CVE-2026-90877

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-15 发布INFO

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_requirement....

CVE-2026-90876

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-15 发布INFO

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function session_star...

CVE-2026-90858

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Af

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-09-15 发布INFO

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the compone...

CVE-2026-90857

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-09-15 发布INFO

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the componen...

CVE-2026-90856

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts a

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-269

漏洞预警2026-09-15 发布INFO

A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown function of the file /web/order.php. This manipulation of ...

CVE-2026-90855

A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown f

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-15 发布INFO

A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown function of the file /web/category-foods.p...

CVE-2026-90854

A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-15 发布INFO

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the compone...

CVE-2026-90852

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-416

漏洞预警2026-09-15 发布INFO

Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1.

CVE-2026-88262

Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick

历史摘要 · 未重新核验 · NVD

#cve #cwe-613

漏洞预警2026-09-15 发布INFO

Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1.

CVE-2026-88261

Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

Soft Serve versions 0.7.1 through 0.11.6 fail to scope Git LFS lock queries by repository, allowing authenticated users to read lock metadata from repositories they cannot acces...

CVE-2026-91773

Soft Serve versions 0.7.1 through 0.11.6 fail to scope Git LFS lock queries by repository, allowing authenticated users

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-15 发布INFO

IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-resource endpoints, allowing authenticated employees to read any colleague's HR records. Attackers ca...

CVE-2026-91770

IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-resource endpoints, allowing authenticated e

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-15 发布INFO

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID c...

CVE-2026-90851

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includ

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

漏洞预警2026-09-15 发布INFO

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipul...

CVE-2026-90850

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown function

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-15 发布INFO

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file ...

CVE-2026-90849

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by th

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-15 发布INFO

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the ...

CVE-2026-90848

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component St

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-15 发布INFO

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new_id parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files ou...

CVE-2026-91751

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new_id parameters in the Entries REST API, allowing

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-15 发布INFO

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the arg...

CVE-2026-90846

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-15 发布INFO

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation...

CVE-2026-90845

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-15 发布INFO

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performi...

CVE-2026-90844

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89