2026-09-19 归档

今日共收录 1784 条安全情报,包含 814 个 CVE,581 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-09-19 发布INFO

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for...

CVE-2026-89093

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Info

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress...

CVE-2026-92229

The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up...

CVE-2026-84434

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all...

CVE-2026-89274

The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and inclu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function...

CVE-2026-93740

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `...

CVE-2026-75885

A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` end

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function...

CVE-2026-93739

A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /bo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function...

CVE-2026-93738

A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for...

CVE-2026-93031

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register...

CVE-2026-93839

LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...

CVE-2026-84064

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions...

CVE-2026-84075

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentic

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and...

CVE-2026-82340

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled refl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection...

CVE-2026-80442

IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCert

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the...

CVE-2026-84078

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute...

CVE-2026-81657

IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection...

CVE-2026-80441

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the ge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an...

CVE-2026-82967

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...

CVE-2026-82832

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands...

CVE-2026-84082

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutra

历史摘要 · 未重新核验 · GitHub Advisory