2026-09-17 归档

今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-09-15 发布INFO

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-85893

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-15 发布INFO

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-69486

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-15 发布INFO

NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l2tpd_config_show_cgi.c, ipsec_show_cgi.c, and mod_vpn_remote/plan.json read handlers. At...

CVE-2026-92256

NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l2tpd_config_show_cgi.c, ipsec_s

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-09-15 发布INFO

The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the netw...

CVE-2026-82567

The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a conn

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-15 发布INFO

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in mod_vpn_remote/plan.json, pptpd_user_show.cgi, pptp_client_config_show.cgi, and l...

CVE-2026-76871

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in mod_vpn_remote/plan.json

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-09-15 发布INFO

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user_pass_show.cgi component. Low-privilege attackers can exploit this flaw v...

CVE-2026-76859

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user_pass_show.cgi c

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-09-15 发布INFO

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network s...

CVE-2026-73444

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unau

历史摘要 · 未重新核验 · NVD

#cve #cwe-303

漏洞预警2026-09-15 发布INFO

`tts-be` is a backend for a timetable selector that aims to help students better choose their class schedules. Versions prior to 2.1.0 have a Broken Access Control vulnerability...

CVE-2026-88065

`tts-be` is a backend for a timetable selector that aims to help students better choose their class schedules. Versions

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306 #cwe-639

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affe...

CVE-2026-83419

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communicat

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affe...

CVE-2026-83418

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communicat

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affe...

CVE-2026-83417

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communicat

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul...

CVE-2026-83352

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions tha

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul...

CVE-2026-83345

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions tha

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul...

CVE-2026-83300

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions tha

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul...

CVE-2026-83044

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions tha

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-15 发布INFO

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula f...

CVE-2026-76821

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

漏洞预警2026-09-15 发布INFO

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteS...

CVE-2026-76820

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-15 发布INFO

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could...

CVE-2026-76707

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view s

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-15 发布INFO

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful ...

CVE-2026-76706

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated rem

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-15 发布INFO

A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker wi...

CVE-2026-76705

A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exp

历史摘要 · 未重新核验 · NVD

#cve #cwe-120