2026-09-23 归档

今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, caller-supplied projects_filter and spaces_filter arguments...

CVE-2026-77252

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ca

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira search accepts a forbidden project clause because it c...

CVE-2026-77251

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

历史摘要 · 未重新核验 · NVD

#cve #cwe-1276

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing acc...

CVE-2026-77250

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, OA

历史摘要 · 未重新核验 · NVD

#cve #cwe-312

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are applied when tools are liste...

CVE-2026-77243

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, EN

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf checks a hostname's resolved addresse...

CVE-2026-77242

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, va

历史摘要 · 未重新核验 · NVD

#cve #cwe-367 #cwe-918

漏洞预警2026-09-22 发布INFO

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attacker...

CVE-2026-43643

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an authorization bypass vulnerability in the billing m

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-22 发布INFO

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers...

CVE-2026-43642

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains a PHP object injection vulnerability in the billing mo

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-22 发布INFO

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7...

CVE-2026-18626

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affect

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-22 发布INFO

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation. This issue affects Connex...

CVE-2026-18462

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-284

漏洞预警2026-09-22 发布INFO

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: fr...

CVE-2026-18461

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format Stri

历史摘要 · 未重新核验 · NVD

#cve #cwe-134

漏洞预警2026-09-22 发布INFO

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 bef...

CVE-2026-18460

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers

历史摘要 · 未重新核验 · NVD

#cve #cwe-193 #cwe-787

漏洞预警2026-09-22 发布INFO

Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. This issue affects Connext Professional: from 7.4.0 before ...

CVE-2026-18459

Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. Th

历史摘要 · 未重新核验 · NVD

#cve #cwe-682

漏洞预警2026-09-22 发布INFO

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Co...

CVE-2026-18458

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-685 #cwe-843

漏洞预警2026-09-22 发布INFO

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1...

CVE-2026-18457

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issu

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-22 发布INFO

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Co...

CVE-2026-11389

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-685 #cwe-843

漏洞预警2026-09-22 发布INFO

Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 b...

CVE-2026-11388

Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Conn

历史摘要 · 未重新核验 · NVD

#cve #cwe-415

漏洞预警2026-09-22 发布INFO

A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of set...

CVE-2026-95818

A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-22 发布INFO

An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authentication middleware is bound only to an explicit lis...

CVE-2026-94455

An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The a

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-345 #cwe-770 #cwe-1390

漏洞预警2026-09-22 发布INFO

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant...

CVE-2026-87902

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-09-22 发布INFO

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content wit...

CVE-2026-86062

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieva

历史摘要 · 未重新核验 · NVD

#cve #cwe-79