2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-18 发布INFO

The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to insufficient output escaping. This make...

CVE-2026-92991

The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in variou

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-18 发布INFO

The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute in all v...

CVE-2026-15650

The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site S

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-18 发布INFO

The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all versions up to, and including, 1.5.1 due to insufficient ...

CVE-2026-14855

The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-18 发布INFO

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Sig...

CVE-2026-93456

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-18 发布INFO

django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff account to read arbitrary page content and stored media path...

CVE-2026-93455

django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff acc

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-18 发布INFO

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file src/ietf/rtp_depacketizer.c of the component RTP Depacket...

CVE-2026-93331

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-125

漏洞预警2026-09-18 发布INFO

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of...

CVE-2026-93314

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-189 #cwe-190

漏洞预警2026-09-18 发布INFO

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a man...

CVE-2026-93313

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTabl

历史摘要 · 未重新核验 · NVD

#cve #cwe-189 #cwe-190

漏洞预警2026-09-18 发布INFO

The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolders) of the user viewing the album, rather than the album o...

CVE-2026-82985

The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolder

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-18 发布INFO

The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting a file whose cont...

CVE-2026-82982

The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing

历史摘要 · 未重新核验 · NVD

#cve #cwe-840

漏洞预警2026-09-18 发布INFO

Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The DAV plugin resolves files from the absolute request URI wi...

CVE-2026-82980

Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The D

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-18 发布INFO

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manag...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without va

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-18 发布INFO

A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-...

CVE-2026-77169

A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-18 发布INFO

Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is established, and explicitly allows local/private a...

CVE-2026-77164

Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote insta

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-18 发布INFO

After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.

CVE-2026-68493

After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-18 发布INFO

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dere...

CVE-2026-93312

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/J

历史摘要 · 未重新核验 · NVD

#cve #cwe-404 #cwe-476

漏洞预警2026-09-18 发布INFO

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component Sa...

CVE-2026-93311

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFun

历史摘要 · 未重新核验 · NVD

#cve #cwe-189 #cwe-190

漏洞预警2026-09-18 发布INFO

A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collector. The manipulation leads to allocation of resources. Re...

CVE-2026-93310

A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collect

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-18 发布INFO

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association used for SDLS process...

CVE-2026-79954

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiv

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-18 发布INFO

Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plugin. Authenticated users with payment-term create permiss...

CVE-2026-93454

Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plu

历史摘要 · 未重新核验 · NVD

#cve #cwe-79