2026-09-18 归档

今日共收录 2436 条安全情报,包含 1258 个 CVE,779 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-16 发布INFO

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under cert...

CVE-2026-89083

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under cert...

CVE-2026-89082

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR...

CVE-2026-87976

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using g

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Tanium addressed a server-side request forgery vulnerability in Threat Response.

CVE-2026-87116

Tanium addressed a server-side request forgery vulnerability in Threat Response.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Tanium addressed an improper access controls vulnerability in Threat Response.

CVE-2026-87113

Tanium addressed an improper access controls vulnerability in Threat Response.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Tanium addressed a SQL injection vulnerability in Threat Response.

CVE-2026-87105

Tanium addressed a SQL injection vulnerability in Threat Response.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Tanium addressed an information disclosure vulnerability in Discover.

CVE-2026-87076

Tanium addressed an information disclosure vulnerability in Discover.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Tanium addressed an improper access controls vulnerability in Threat Response.

CVE-2026-87026

Tanium addressed an improper access controls vulnerability in Threat Response.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Tanium addressed a SQL injection vulnerability in Asset.

CVE-2026-87024

Tanium addressed a SQL injection vulnerability in Asset.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Tanium addressed a SQL injection vulnerability in Asset.

CVE-2026-86865

Tanium addressed a SQL injection vulnerability in Asset.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass ...

CVE-2026-86831

Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit ...

CVE-2026-86089

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flo...

CVE-2026-82561

Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a cl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnost...

CVE-2026-81870

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider em

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets refere...

CVE-2026-81866

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not en

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older u...

CVE-2026-76646

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicati...

CVE-2026-70469

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.0, _proc...

CVE-2026-62949

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security revie...

CVE-2026-20361

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src/scenegraph/commands.c of the component BIFS Handler. The...

CVE-2026-92473

A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src

历史摘要 · 未重新核验 · NVD