2026-09-18 归档

今日共收录 2436 条安全情报,包含 1258 个 CVE,779 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-17 发布INFO

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-sta...

CVE-2026-92903

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A flaw was found in the foreman_ansible plugin's Ansible inventory API. The controller builds its host query using an unscoped Host.where call that does not enforce the search f...

CVE-2026-92893

A flaw was found in the foreman_ansible plugin's Ansible inventory API. The controller builds its host query using an un

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of e...

CVE-2026-92611

In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentia...

CVE-2026-81474

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potential...

CVE-2026-81439

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remot...

CVE-2026-81438

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algori

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An...

CVE-2026-66269

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Selec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A flaw was found in the foreman_ansible plugin's Ansible override values API. The destroy action resolves the target LookupValue record by ID without verifying it belongs to an ...

CVE-2026-92894

A flaw was found in the foreman_ansible plugin's Ansible override values API. The destroy action resolves the target Loo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login a...

CVE-2026-78428

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving anoth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the i...

CVE-2026-78427

The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of ...

CVE-2026-78426

The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticketing system, an expenses tool, or anything they legitimat...

CVE-2026-78425

Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged servic...

CVE-2026-50610

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pi...

CVE-2026-50609

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require...

CVE-2026-50608

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authentica...

CVE-2026-15688

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin before 7.9.7 does not properly validate the ownership of an attachment before deleting it, allowin...

CVE-2026-87831

The Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin before 7.9.7 does not properly validate t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin before 7.9.7 does not properly validate the ownership of an attachment before deleting it, allowin...

CVE-2026-87829

The Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin before 7.9.7 does not properly validate t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing...

CVE-2026-86320

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all netwo...

CVE-2026-50607

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense.

历史摘要 · 未重新核验 · NVD