2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-16 发布INFO

Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated users to retrieve provider configurations from spaces ...

CVE-2026-92750

Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticat

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthent...

CVE-2026-92749

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, all

历史摘要 · 未重新核验 · NVD

#cve #cwe-338

漏洞预警2026-09-16 发布INFO

A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbacks_controller.rb of the component Shopify OAuth. The manipulation le...

CVE-2026-92527

A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbacks_controll

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-16 发布INFO

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attac...

CVE-2026-81872

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/lo

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-834

漏洞预警2026-09-16 发布INFO

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE, OT...

CVE-2026-81871

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlplogg

历史摘要 · 未重新核验 · NVD

#cve #cwe-295 #cwe-923

漏洞预警2026-09-16 发布INFO

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueL...

CVE-2026-81869

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attr

历史摘要 · 未重新核验 · NVD

#cve #cwe-176 #cwe-400

漏洞预警2026-09-16 发布INFO

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL...

CVE-2026-76449

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-16 发布INFO

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL...

CVE-2026-76448

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-16 发布INFO

A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrat...

CVE-2026-76447

A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-16 发布INFO

A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affec...

CVE-2026-76446

A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific&

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-09-16 发布INFO

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alt...

CVE-2026-76438

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-16 发布INFO

A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to rea...

CVE-2026-76434

A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-16 发布INFO

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affect...

CVE-2026-76433

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticate

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-16 发布INFO

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring database. ...

CVE-2026-76426

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-16 发布INFO

A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This vulnerability is du...

CVE-2026-76425

A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-16 发布INFO

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due ...

CVE-2026-76424

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary f

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-16 发布INFO

A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to lo...

CVE-2026-76413

A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Softw

历史摘要 · 未重新核验 · NVD

#cve #cwe-1259

漏洞预警2026-09-16 发布INFO

A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. ...

CVE-2026-76412

A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote att

历史摘要 · 未重新核验 · NVD

#cve #cwe-264

漏洞预警2026-09-16 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security revie...

CVE-2026-76409

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-16 发布INFO

Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-controlled clientID and asks isUserAutho...

CVE-2026-63506

Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized a

历史摘要 · 未重新核验 · NVD

#cve #cwe-639