2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-17 发布INFO

OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior to 3.34.0, a network attacker can crash a reachable Open...

CVE-2026-52836

OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-17 发布INFO

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(),...

CVE-2026-44236

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an unders

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-17 发布INFO

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login and cause...

CVE-2026-44235

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an unders

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-191

漏洞预警2026-09-17 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-9314

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics views. The event General card (event_general.ctp) and the server/feed preview ...

CVE-2026-93296

MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics views. The event Gene

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-17 发布INFO

MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user. Background job arguments are passed directly as the arg...

CVE-2026-93295

MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-74

漏洞预警2026-09-17 发布INFO

SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that interpolate service_name and span_name fields into Clic...

CVE-2026-93292

SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints tha

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadv_dat_entry_add(), i...

CVE-2026-93204

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses W

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3c_master_register_new_i3c_devs() registers ...

CVE-2026-93202

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device re

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent memory cache_pos_decode(), cache_key_decode() and the las...

CVE-2026-93201

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent m

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master->this sysfs attribute callbacks for the master controller device ...

CVE-2026-93200

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master->this sy

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3c_master_search_i3c_dev_duplicate() searche...

CVE-2026-93199

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplic

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persisted dirty_tail chain at load The writeback worker follows the persisted dirty...

CVE-2026-93198

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persisted dirty_tail chain

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: memcg: move LRU size accounting on reparenting instead of copying it When a memory cgroup is offlined its L...

CVE-2026-93197

In the Linux kernel, the following vulnerability has been resolved: memcg: move LRU size accounting on reparenting inst

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtio_pmem: refcount requests for token lifetime KASAN reports slab-use-after-free in __wake_up_co...

CVE-2026-93196

In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtio_pmem: refcount requests for token li

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel The DisplayPort AUX channel gets initial...

CVE-2026-93195

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Support unregistering

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Release core resources Core resources such as the DisplayPort AUX channel get initiali...

CVE-2026-93194

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Release core resources Core r

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup Sashiko reported a reference leak in...

CVE-2026-93193

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Fix OF node reference le

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Clear queue->active_job when v3d_fence_create() fails The run_job() callbacks for BIN, RENDER, TFU...

CVE-2026-93192

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Clear queue->active_job when v3d_fence_cre

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smack_msg_queue_msgrcv The smack_msg_queue_msgrcv() function incorrect...

CVE-2026-93191

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smack_msg_queu

历史摘要 · 未重新核验 · NVD

#cve