2026-09-20 归档

今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。

← 返回归档列表

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.

CVE-2026-84086

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.

CVE-2026-84085

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutral

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privile...

CVE-2026-84083

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on t

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation.

CVE-2026-84081

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certific

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.

CVE-2026-84076

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to imp

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

CVE-2026-84074

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

CVE-2026-84070

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.

CVE-2026-84036

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to imp

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability.

CVE-2026-82896

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.

CVE-2026-82893

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-82892

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutraliza

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS comm...

CVE-2026-82887

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to impro

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in the REST API.

CVE-2026-82885

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL stat...

CVE-2026-81656

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user suppl...

CVE-2026-81623

IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileg

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-18 发布INFO

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints that accept permessage-deflate and rely...

CVE-2026-77528

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, We

历史摘要 · 未重新核验 · NVD

#cve #cwe-409 #cwe-770

漏洞预警2026-09-18 发布INFO

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id() and drop_partition_time() use part_config.retention_schem...

CVE-2026-61821

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id()

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-18 发布INFO

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and inte...

CVE-2026-61818

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() rea

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-18 发布INFO

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance(), show_partitions(), show_partition_info(), undo_partition()...

CVE-2026-61817

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance(), s

历史摘要 · 未重新核验 · NVD

#cve #cwe-89