2026-09-16 归档

今日共收录 2620 条安全情报,包含 1789 个 CVE,446 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-15 发布INFO

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User intera...

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed....

CVE-2026-0179

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execu...

CVE-2026-0177

In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This cou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges...

CVE-2026-0171

In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no addit...

CVE-2026-0170

In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed...

CVE-2026-0159

In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authen...

CVE-2026-88765

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 bef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match ...

CVE-2026-85234

A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a n

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have al...

CVE-2026-82837

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Concrete CMS 9.0.0 to 9.5.2 stored group folder names without sanitization and printed them unescaped on the Members > Groups dashboard page, resulting in stored cross-site scri...

CVE-2026-81899

Concrete CMS 9.0.0 to 9.5.2 stored group folder names without sanitization and printed them unescaped on the Members > G

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In Concrete CMS below version 9.5.3, the Address attribute's country-less text formatter skipped HTML-escaping, enabling stored XSS in Express association views. A user able to ...

CVE-2026-81898

In Concrete CMS below version 9.5.3, the Address attribute's country-less text formatter skipped HTML-escaping, enabling

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote acc...

CVE-2026-81240

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote acc...

CVE-2026-81239

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access ...

CVE-2026-81238

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially ex...

CVE-2026-81237

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote acc...

CVE-2026-81236

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially e...

CVE-2026-81235

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py p...

CVE-2026-61668

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates gi...

CVE-2026-58502

githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read receives its caller...

CVE-2026-58485

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through

历史摘要 · 未重新核验 · NVD