2026-09-17 归档

今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-15 发布INFO

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, deploying only the Topic Ope...

CVE-2026-55226

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-272

漏洞预警2026-09-15 发布INFO

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a...

CVE-2026-55225

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-441 #cwe-250

漏洞预警2026-09-15 发布INFO

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the upload_ad_image tool in meta_ads_mcp/core/ads.py passes...

CVE-2026-54549

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, th

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-15 发布INFO

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.27.0 until 0.53.1, the uprob...

CVE-2026-53941

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Li

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-15 发布INFO

BharatMLStack up to and including v1.3.0 is vulnerable to Cross Site Scripting (XSS) in the component Trufflebox UI (trufflebox-ui) in GenericNumerixTable.jsx.

CVE-2026-39038

BharatMLStack up to and including v1.3.0 is vulnerable to Cross Site Scripting (XSS) in the component Trufflebox UI (tru

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit_user_properties permissions on the REST API user write endpoints (PUT /ccm/api/1.0/users/{uID} and POST /ccm/api/1.0/u...

CVE-2026-18115

Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit_user_properties permissions on the REST API user write endpoi

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-15 发布INFO

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename ...

CVE-2026-18113

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could hav...

CVE-2026-13210

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-15 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could hav...

CVE-2026-12910

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-15 发布INFO

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could expl...

CVE-2026-12752

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-09-15 发布INFO

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's W...

CVE-2026-12751

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML cod

历史摘要 · 未重新核验 · NVD

#cve #cwe-80

漏洞预警2026-09-15 发布INFO

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web...

CVE-2026-12750

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authent

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web...

CVE-2026-12749

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authent

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.

CVE-2026-12742

IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-12728

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-12667

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-12666

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-09-15 发布INFO

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

CVE-2026-12358

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of

历史摘要 · 未重新核验 · NVD

#cve #cwe-674

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-12355

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-74

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-12354

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-913