京公网安备 11000002002063号
本条输入并非安全公告，而是一条来自中国政府备案公示系统的登记信息：标题为“京公网安备 11000002002063号”，来源标注为 360CERT，引用链接指向 beian.gov.cn 的 registerSystemInfo 查询页面，
2026-09-20 归档
今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。
← 返回归档列表（总）网出证（京）字第281号
本条记录的标题为“（总）网出证（京）字第281号”，来源标注为 360CERT，链接指向 360 官网的许可证/资质备案页面（https://www.360.cn/licence2.html），发布时间为 2026-09-20。从编号格式看
京网文〔2020〕6051-1195号
本次输入并未提供任何安全漏洞公告正文，标题“京网文〔2020〕6051-1195号”是北京市网络文化经营许可证编号，来源为360CERT，链接指向360.cn的许可证展示页面。输入中无摘要或正文片段，无CVE编号，无厂商产品信息，严重性标注
京ICP证080047号[京ICP备08010314号-6]
本条记录来自 360CERT 的公告聚合通道，标题为“京ICP证080047号[京ICP备08010314号-6]”，来源链接指向工信部 ICP/IP 地址/域名信息备案管理系统（beian.miit.gov.cn），而并非具体的安全漏洞公
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.
CVE-2026-94084
Suricata 是一款广泛使用的开源网络入侵检测/防御系统（IDS/IPS）。在 8.0.7 之前的版本中，其 HTTP/2 协议解析组件存在一个释放后重用（use-after-free）漏洞，具体位于 Http2ThreadMultiB
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when ...
CVE-2026-94083
CVE-2026-94083 是 Suricata 8.0.7 之前版本中存在的一个类型混淆漏洞，位于 DoH2 协议解析模块。当 Suricata 处理一个 DoH2 请求并伴随 HTTP1 到 HTTP2 的协议升级时，清理代码会错误地
OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to c...
CVE-2026-93985
OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. DBD::DBM passes the dbm_type and dbm_mldbm connect attr...
CVE-2026-78030
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM.
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulation of the argume...
CVE-2026-93742
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of
The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowing unauthenticated users to update arbitrary WordPress op...
CVE-2026-86591
The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowi
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulati...
CVE-2026-93741
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the functio
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and includ...
CVE-2026-92229
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitr
The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 10.8.1. The vulnerability exists because `WPRM_Meta...
CVE-2026-89274
The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and inclu
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the upload_file function. This is due to a mismat...
CVE-2026-84434
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
CVE-2026-84082
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutra
IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer...
CVE-2026-84078
IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.
CVE-2026-84075
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentic
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL...
CVE-2026-84073
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to i
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL...
CVE-2026-84064
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to i
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guar...
CVE-2026-82967
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attack