2026-09-18 归档

今日共收录 2436 条安全情报,包含 1258 个 CVE,779 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-16 发布INFO

A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Softwa...

CVE-2026-20250

A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Softw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software co...

CVE-2026-20248

A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could all...

CVE-2026-20222

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device ...

CVE-2026-20135

A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Fi...

CVE-2026-20121

A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adapt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Fi...

CVE-2026-20120

A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adapt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is runnin...

CVE-2026-73443

On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place a...

CVE-2026-59823

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated

历史摘要 · 未重新核验 · NVD

安全公告2026-09-17 发布INFO

Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection

CVE-2026-92993

A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python

CVE-2026-92943

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

TS3 Manager: Reflected XSS via /api/download port parameter steals operator session

CVE-2026-54253

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. Prior to 2.2.6, the /api/download handler in pac

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler

CVE-2026-54617

GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

Frappe HR: SQL Injection in HRMS Salary Payments Based on Payment Mode Report

CVE-2026-54524

Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.7.0, an authenticated user with the

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

Traccar: Uncontrolled Infinite Loop DoS via Group Parent Cycle

CVE-2026-52852

Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated user with permission to manage groups a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

Traccar: Authenticated Blind SQL Injection in DELETE /api/permissions

CVE-2026-52851

Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated, non-readonly user with access to an ob

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

Dromara mayfly-go AI Assistant ai.go authorization

CVE-2026-92992

A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown functio

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

ESPAsyncWebServer: Integer overflow in multipart boundary parser causes denial of service

CVE-2026-54571

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope

CVE-2026-54239

Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertex

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

uniget: EDITOR Command Injection in uniget CLI

CVE-2026-55061

uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

uniget: Path Traversal in Hook Files - Directory Escape Vulnerability

CVE-2026-55062

uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget

历史摘要 · 未重新核验 · OSV.dev