2026-09-23 归档

今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。

← 返回归档列表

漏洞预警2026-09-23 发布HIGH

UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a String...

CVE-2026-89425

CVE-2026-89425 是 FasterXML jackson-core 中一个仅影响可用性的拒绝服务类缺陷，根因位于 UTF8DataInputJsonParser._reportInvalidToken()。该方法在构造 "非法

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-23 发布MEDIUM

Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that leaves domain objects permanentl...

CVE-2026-96273

Ghidra 12.1.4 之前的版本在 OptionsDB.createUnregisteredOption() 中未对 TYPE_COL 字节做有效性校验。该字节本应作为内部类型处理器数组（type handler table）的下标使

历史摘要 · 未重新核验 · NVD

#cve #cwe-460

漏洞预警2026-09-23 发布INFO

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown processing of the file /post_upload.p...

CVE-2026-95830

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue a

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-api/src...

CVE-2026-95829

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function Paginatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backu...

CVE-2026-94367

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptogr...

CVE-2026-92930

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design tha

历史摘要 · 未重新核验 · NVD

#cve #cwe-330

漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An una...

CVE-2026-92929

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary c

历史摘要 · 未重新核验 · NVD

#cve #cwe-290

漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or ro...

CVE-2026-92928

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-09-22 发布INFO

A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the file Front-end/server.php of the component Authentication. E...

CVE-2026-95828

A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-384

漏洞预警2026-09-22 发布INFO

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file...

CVE-2026-95820

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affecte

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-09-22 发布INFO

ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP quer...

CVE-2026-61685

ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build Type

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provides Plone’s Dexterity-based content types. Plone.app.dexter...

CVE-2026-57576

plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provide

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.

CVE-2026-18176

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication.

CVE-2026-18173

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity ref...

CVE-2026-18172

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling.

CVE-2026-18170

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-22 发布INFO

A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this vulnerability is an unknown functionality ...

CVE-2026-95819

A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Af

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-22 发布INFO

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an applicatio...

CVE-2026-19202

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cache

历史摘要 · 未重新核验 · NVD

#cve #cwe-524

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client...

CVE-2026-18161

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify tran

历史摘要 · 未重新核验 · NVD

#cve #cwe-778

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper a...

CVE-2026-18156

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass secur

历史摘要 · 未重新核验 · NVD

#cve #cwe-862