Cyber Security Daily Radar

2026-09-19 归档

今日共收录 1784 条安全情报，包含 814 个 CVE，581 篇安全通告，以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of me...

CVE-2026-11726

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or c

历史摘要 · 未重新核验 · NVD

#cve#cwe-125
漏洞预警2026-09-18 发布INFO

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.

CVE-2026-11725

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a

历史摘要 · 未重新核验 · NVD

#cve#cwe-190
漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.

CVE-2026-11722

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vuln

历史摘要 · 未重新核验 · NVD

#cve#cwe-444
漏洞预警2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager start...

CVE-2026-11716

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or pote

历史摘要 · 未重新核验 · NVD

#cve#cwe-122
漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component.

CVE-2026-11711

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service componen

历史摘要 · 未重新核验 · NVD

#cve#cwe-502
漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers.

CVE-2026-11710

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of

历史摘要 · 未重新核验 · NVD

#cve#cwe-444
漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability.

CVE-2026-11549

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerab

历史摘要 · 未重新核验 · NVD

#cve#cwe-284
漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.

CVE-2026-11548

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vuln

历史摘要 · 未重新核验 · NVD

#cve#cwe-444
漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks.

CVE-2026-11545

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the admi

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

CVE-2026-11540

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the fil

历史摘要 · 未重新核验 · NVD

#cve#cwe-863
漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector.

CVE-2026-11539

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX conne

历史摘要 · 未重新核验 · NVD

#cve#cwe-306
漏洞预警2026-09-18 发布INFO

Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthenticated attackers to read arbitrary files by supplying a ...

CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthen

历史摘要 · 未重新核验 · NVD

#cve#cwe-22
漏洞预警2026-09-18 发布INFO

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2/leases/{lease_id} and DELETE /v2/lea...

CVE-2026-93854

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete

历史摘要 · 未重新核验 · NVD

#cve#cwe-1025
漏洞预警2026-09-18 发布INFO

In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project without enforcing project scoping or an administrator-only po...

CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project with

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-18 发布INFO

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function get_client_ip of the file saleor/account/throttling.py. ...

CVE-2026-93650

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function

历史摘要 · 未重新核验 · NVD

#cve#cwe-307#cwe-799
漏洞预警2026-09-18 发布INFO

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote ...

CVE-2026-75894

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrar

历史摘要 · 未重新核验 · NVD

#cve#cwe-617
漏洞预警2026-09-18 发布INFO

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg()  function via IPA frame lengths.

CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg()  fun

历史摘要 · 未重新核验 · NVD

#cve#cwe-122
漏洞预警2026-09-18 发布INFO

In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context GSN-Address sub-field, leading to memory corruption.

CVE-2026-75892

In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context

历史摘要 · 未重新核验 · NVD

#cve#cwe-787
漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies.

CVE-2026-11538

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token coo

历史摘要 · 未重新核验 · NVD

#cve#cwe-117
漏洞预警2026-09-18 发布INFO

Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the site_id GET parameter in th...

CVE-2021-48008

Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQ

历史摘要 · 未重新核验 · NVD

#cve#cwe-89