2026-09-18 归档

今日共收录 2436 条安全情报,包含 1258 个 CVE,779 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-17 发布INFO

The HT Mega Addons for Elementor WordPress plugin before 3.2.6 does not restrict the HTML tag name used to render the section headline in several of its widgets and blocks to a...

CVE-2026-86788

The HT Mega Addons for Elementor WordPress plugin before 3.2.6 does not restrict the HTML tag name used to render the s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the ...

CVE-2026-86446

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later output in on an adminis...

CVE-2026-85130

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowi...

CVE-2026-85128

The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticate...

CVE-2025-15697

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of sev

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the admin_request_handler function. This is due to ...

CVE-2026-87935

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authen...

CVE-2026-50604

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Transient DOS while parsing frame during channel usage.

CVE-2026-25294

Transient DOS while parsing frame during channel usage.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

CVE-2026-25290

Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Information Disclosure when a pointer is reused after being deallocated.

CVE-2026-25284

Information Disclosure when a pointer is reused after being deallocated.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.

CVE-2026-25283

Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.

CVE-2026-25282

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

CVE-2026-25281

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

CVE-2026-25280

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

CVE-2026-25278

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copyi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

CVE-2026-25275

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Memory corruption while processing rear sensor IOCTL calls.

CVE-2026-25261

Memory corruption while processing rear sensor IOCTL calls.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

CVE-2026-24081

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enab

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

CVE-2026-24075

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper sy

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

CVE-2026-24074

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operat

历史摘要 · 未重新核验 · NVD