2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-17 发布INFO

FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenti...

CVE-2026-90823

FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based b

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-17 发布INFO

FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon. An unauthen...

CVE-2026-90822

FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command i

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-16 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Soft...

CVE-2026-20332

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-16 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Soft...

CVE-2026-20330

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

历史摘要 · 未重新核验 · NVD

#cve #cwe-707

漏洞预警2026-09-16 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Soft...

CVE-2026-20329

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-09-16 发布INFO

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to ex...

CVE-2026-20324

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Sof

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbi...

CVE-2026-20242

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

安全公告2026-09-18 发布INFO

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

#knownsec #seebug #vulnerability

安全公告2026-09-18 发布INFO

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

#android #mobile

安全公告2026-09-18 发布INFO

多款Huawei路由器信息泄露漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

#knownsec #seebug #vulnerability

安全公告2026-09-17 发布INFO

punchin-email: Operator inbox (FORWARD_TO) disclosed to correspondents on reply — Cloudflare forward() drops the relay Reply-To

CVE-2026-54649

punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Pr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-201

安全公告2026-09-17 发布INFO

CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

CVE-2026-54546

CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-09-17 发布INFO

memcg: move LRU size accounting on reparenting instead of copying it

CVE-2026-93197

In the Linux kernel, the following vulnerability has been resolved: memcg: move LRU size accounting on reparenting inst

历史摘要 · 未重新核验 · OSV.dev

#advisory #linux

安全公告2026-09-17 发布INFO

nvdimm: virtio_pmem: refcount requests for token lifetime

CVE-2026-93196

In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtio_pmem: refcount requests for token li

历史摘要 · 未重新核验 · OSV.dev

#advisory #linux

安全公告2026-09-17 发布INFO

ASoC: rt700-sdw: always drain jack work on remove

CVE-2026-93185

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt700-sdw: always drain jack work on remove

历史摘要 · 未重新核验 · OSV.dev

#advisory #linux

安全公告2026-09-17 发布INFO

drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read

CVE-2026-93179

In the Linux kernel, the following vulnerability has been resolved: drm/amd/powerplay: fix VoltageObjectInfo zero-strid

历史摘要 · 未重新核验 · OSV.dev

#advisory #linux

安全公告2026-09-17 发布INFO

drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup

CVE-2026-93178

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index

历史摘要 · 未重新核验 · OSV.dev

#advisory #linux

安全公告2026-09-17 发布INFO

drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup

CVE-2026-93177

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index

历史摘要 · 未重新核验 · OSV.dev

#advisory #linux

安全公告2026-09-17 发布INFO

crypto: atmel-sha204a - fix heap info leak on I2C transfer failure

CVE-2026-93159

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C t

历史摘要 · 未重新核验 · OSV.dev

#advisory #linux

安全公告2026-09-17 发布INFO

RDMA/irdma: Add refcounting to user ring MRs

CVE-2026-93154

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to user ring MRs Preve

历史摘要 · 未重新核验 · OSV.dev

#advisory #linux