2026-09-17 归档

今日共收录 2425 条安全情报,包含 1381 个 CVE,651 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-16 发布INFO

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint using operator credentials allowing exec...

CVE-2026-27549

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/do

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using user or operator credentials allowing exe...

CVE-2026-27548

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_menu_info endpoint using valid user or operator credentials allowi...

CVE-2026-27547

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_menu_info

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could hav...

CVE-2026-8030

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission against the capacity configured for its own slot, allowing u...

CVE-2026-86475

The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission aga

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with develop...

CVE-2026-7514

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions could have ...

CVE-2026-79708

GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an auth...

CVE-2026-78252

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could h...

CVE-2026-3855

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could h...

CVE-2026-1168

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress shortcode parser when it substitutes a supported token int...

CVE-2026-19857

The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could hav...

CVE-2026-19619

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.

CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have ...

CVE-2026-16794

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted through its form widget before including them in the body of a...

CVE-2026-13407

The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted throu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could h...

CVE-2025-14871

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could hav...

CVE-2024-11222

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is created to validate t...

CVE-2026-92358

A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a diff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, check...

CVE-2026-89328

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges bef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to ...

CVE-2026-89327

The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user th

历史摘要 · 未重新核验 · NVD