2026-09-16 归档

今日共收录 2620 条安全情报,包含 1789 个 CVE,446 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-15 发布INFO

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport accepts attacker-controlled HTTP polling sessions before CBO...

CVE-2026-61554

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport acc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @login_required decorato...

CVE-2026-54544

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP serv...

CVE-2026-19655

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF token va...

CVE-2026-18426

Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected p...

CVE-2026-92240

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16.

CVE-2026-92239

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbir

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156 a...

CVE-2026-92238

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety viol

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers ...

CVE-2026-89027

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s 24-bit declared length but waits to buffer the entire pa...

CVE-2026-88975

Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to caus...

CVE-2026-88922

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decomp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.

CVE-2026-88743

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field.

CVE-2026-88742

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exp...

CVE-2026-87289

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Support

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit v...

CVE-2026-87288

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit v...

CVE-2026-87287

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit v...

CVE-2026-87286

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerabilit...

CVE-2026-87285

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerabilit...

CVE-2026-87284

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerabilit...

CVE-2026-87283

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerabilit...

CVE-2026-87282

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th

历史摘要 · 未重新核验 · NVD