2026-09-19 归档

今日共收录 1784 条安全情报，包含 814 个 CVE，581 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-17 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70200

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-285

漏洞预警2026-09-17 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70009

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attac

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-17 发布INFO

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69865

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elev

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-17 发布INFO

Azure Arc Elevation of Privilege Vulnerability

CVE-2026-69399

Azure Arc Elevation of Privilege Vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-441

漏洞预警2026-09-17 发布INFO

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletar_socios.php exposes an unauthenticated GET endpoint whose chave para...

CVE-2026-54767

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletar_socios.php

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-798

漏洞预警2026-09-17 发布INFO

Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request URLs without using H...

CVE-2026-54734

Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-suppl

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-17 发布INFO

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HT...

CVE-2026-93374

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-17 发布INFO

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chr...

CVE-2026-93373

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-17 发布INFO

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (...

CVE-2026-93372

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbi

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-17 发布INFO

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The auth...

CVE-2026-45140

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote a

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-94 #cwe-219 #cwe-434

漏洞预警2026-09-17 发布INFO

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.

CVE-2025-55787

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-17 发布INFO

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_private_sail_pixel_format() in ...

CVE-2026-54627

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. I

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-787

漏洞预警2026-09-17 发布INFO

GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without a leadin...

CVE-2026-54617

GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200 #cwe-522

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix skb double-free in xfrm_dev_direct_output() A return value other than 1 from local_out() means th...

CVE-2026-92489

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix skb double-free in xfrm_dev_direct_output

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isert_recv_done() hands each received PDU to th...

CVE-2026-90414

In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs declaring more data than was received isert_login_recv_done() records how many ...

CVE-2026-90413

In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs declaring more data tha

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE xprtsock replaces and restores...

CVE-2026-90235

In the Linux kernel, the following vulnerability has been resolved: sunrpc: xprtsock: annotate shared socket callbacks

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() nvmet_execute_auth_send() allocates the DH-HMA...

CVE-2026-90230

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmet_auth_ne

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ib_free_cq() smbdirect_connection_destroy_qp() creates the send...

CVE-2026-90173

In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ib_free

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocation failure nfs4_alloc_client() allocates an NFSv4.0 call...

CVE-2026-90151

In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocati

历史摘要 · 未重新核验 · NVD

#cve