2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An un...

CVE-2026-81481

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Res

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-17 发布INFO

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed.

CVE-2026-53681

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions ...

CVE-2026-92925

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packet

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-17 发布INFO

Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters (print_r, vardump, json_encode, yaml_en...

CVE-2026-92917

Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled (system.debugger.enabled: true, which is not the default), the Clo...

CVE-2026-92916

Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled (system.d

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

WWBN AVideo through commit e01e41ecc (no patched version available) contains a broken access control flaw in objects/userVerifyEmail.php. The script disables the login requireme...

CVE-2026-92915

WWBN AVideo through commit e01e41ecc (no patched version available) contains a broken access control flaw in objects/use

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-17 发布INFO

AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equality against an unini...

CVE-2026-92914

AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-17 发布INFO

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 uses a cryptographically weak pseudo-random number generator when creating account activation / login pairing code...

CVE-2026-92913

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 uses a cryptographically weak pseudo-random number genera

历史摘要 · 未重新核验 · NVD

#cve #cwe-330

漏洞预警2026-09-17 发布INFO

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 uses cryptographically weak uniqid() values for RTMP publish keys in LiveTransmition, reducing key entropy to approximate...

CVE-2026-92912

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 uses cryptographically weak uniqid() values for RTMP publish key

历史摘要 · 未重新核验 · NVD

#cve #cwe-330

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could poten...

CVE-2026-81480

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability.

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potential...

CVE-2026-81479

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-187

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access co...

CVE-2026-81478

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnera

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potent...

CVE-2026-81477

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab...

CVE-2026-81476

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Element

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote ...

CVE-2026-81475

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Functio

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local a...

CVE-2026-81441

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Functio

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could po...

CVE-2026-81440

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-09-17 发布INFO

Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2.

CVE-2026-78296

Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing.

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-09-17 发布INFO

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed.

CVE-2026-53679

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed.

CVE-2026-11874

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed.

历史摘要 · 未重新核验 · NVD

#cve