2026-09-16 归档

今日共收录 2620 条安全情报,包含 1789 个 CVE,446 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-09-16 发布INFO

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load`...

CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in...

CVE-2026-92255

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi caused by imp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP...

CVE-2026-76872

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL man

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component:...

CVE-2026-83408

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The suppo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component:...

CVE-2026-83357

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The suppo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM...

CVE-2026-83368

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the...

CVE-2026-76873

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the...

CVE-2026-76862

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting vulnerability...

CVE-2026-76867

Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting vulnerability in routing and NAT conf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in...

CVE-2026-76868

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in route_policy_add.cgi caused by a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in...

CVE-2026-76863

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod_qos_bandwidth pl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot_timer_set.cgi...

CVE-2026-76869

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot_timer_set.cgi caused by improper ssc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval() in...

CVE-2026-76864

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval() in qos_xianz_add_cgi, qos_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in...

CVE-2026-76861

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntools_tcpdump_start_set.cgi caused by an u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd_write...

CVE-2026-76870

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd_write pre-flash validation ro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user...

CVE-2026-76866

Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNS

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS...

CVE-2026-76865

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filt

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in...

CVE-2026-76855

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints hand

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in...

CVE-2026-76858

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddns_wan_list_show.cgi caused

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi...

CVE-2026-76860

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokeniz

历史摘要 · 未重新核验 · GitHub Advisory