2026-09-19 归档

今日共收录 1784 条安全情报,包含 814 个 CVE,581 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions...

CVE-2026-84241

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authoriz

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive...

CVE-2026-84239

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler,...

CVE-2026-93870

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...

CVE-2026-84106

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function...

CVE-2026-93869

Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect de

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition...

CVE-2026-91205

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands...

CVE-2026-84085

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutral

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without allowed_classes...

CVE-2026-93872

Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without allowed_classes restriction in the comment

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing...

CVE-2026-91203

A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a syml

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in...

CVE-2026-93838

SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() that fails t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by...

CVE-2026-91202

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory co

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic...

CVE-2026-81933

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions...

CVE-2026-84081

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certific

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to...

CVE-2026-82893

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...

CVE-2026-84086

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated...

CVE-2026-82885

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the...

CVE-2026-81937

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions...

CVE-2026-84077

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site requ

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...

CVE-2026-84074

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · GitHub Advisory