2026-09-19 归档

今日共收录 1784 条安全情报，包含 814 个 CVE，581 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-18 发布INFO

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device...

CVE-2026-88259

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-18 发布INFO

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to...

CVE-2026-86689

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-09-18 发布INFO

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to...

CVE-2026-86520

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of unc_decoder::get_compressed_image_data_uncompressed() in li...

CVE-2026-84451

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of un

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a clap property and an ispe width or height greater than IN...

CVE-2026-84450

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in an integer width that can o...

CVE-2026-84449

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace()

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-190

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inline_mask_data() function in libheif/api/libheif/heif_regio...

CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inli

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-131

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image becaus...

CVE-2026-84447

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden referenc

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track::init_sample_timing_table() compute a...

CVE-2026-84446

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, heif_context_add_image_tile() accepts an independently cons...

CVE-2026-84444

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, he

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-18 发布INFO

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network w...

CVE-2026-84400

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote d

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-18 发布INFO

CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could ac...

CVE-2026-84398

CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An att

历史摘要 · 未重新核验 · NVD

#cve #cwe-258

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompress_brotli() and do...

CVE-2026-84384

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata

历史摘要 · 未重新核验 · NVD

#cve #cwe-409

漏洞预警2026-09-18 发布INFO

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm wit...

CVE-2026-81946

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-18 发布INFO

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insuf...

CVE-2026-81945

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 conta

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-18 发布INFO

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insu...

CVE-2026-81944

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 cont

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-18 发布INFO

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. ...

CVE-2026-81943

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 cont

历史摘要 · 未重新核验 · NVD

#cve #cwe-489

漏洞预警2026-09-18 发布INFO

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web serv...

CVE-2026-81942

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 cont

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-18 发布INFO

CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the devi...

CVE-2026-81305

CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity o

历史摘要 · 未重新核验 · NVD

#cve #cwe-829

漏洞预警2026-09-18 发布INFO

Sublime Text for Windows through Build 4192 (Sublime Text 4) and Build 3207 (Sublime Text 3) contains a local privilege escalation vulnerability that allows unprivileged local a...

CVE-2026-7006

Sublime Text for Windows through Build 4192 (Sublime Text 4) and Build 3207 (Sublime Text 3) contains a local privilege

历史摘要 · 未重新核验 · NVD

#cve #cwe-494