2026-09-16 归档
今日共收录 2620 条安全情报,包含 1789 个 CVE,446 篇安全通告,以及 100 篇研究论文。
← 返回归档列表 漏洞预警2026-09-15 发布INFO
CVE-2026-61554
emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport acc
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-54544
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbou
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-19655
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-18426
Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-92240
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untag
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-92239
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbir
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-92238
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety viol
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-89027
miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downg
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-88975
Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-88922
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decomp
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-88743
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-87289
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Support
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-87288
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-87287
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-87286
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-87285
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-87284
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-87283
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-87282
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
历史摘要 · 未重新核验 · NVD