2026-09-23 归档

今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might ...

CVE-2026-65117

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-259

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may...

CVE-2026-65115

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource co

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vu...

CVE-2026-65114

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability m...

CVE-2026-65112

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-22 发布INFO

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerabili...

CVE-2026-65111

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-09-22 发布INFO

NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code executio...

CVE-2026-24267

NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious dat

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-22 发布INFO

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnera...

CVE-2026-24239

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause re

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-22 发布INFO

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to...

CVE-2026-19915

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-22 发布INFO

MISP contains a stored cross-site scripting (XSS) vulnerability in the admin email composition screen. The MISP.org organization name setting was interpolated directly into a Ja...

CVE-2026-95682

MISP contains a stored cross-site scripting (XSS) vulnerability in the admin email composition screen. The MISP.org orga

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-22 发布INFO

MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build() library contains a logic error in its readFile guard c...

CVE-2026-95679

MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-918

漏洞预警2026-09-22 发布INFO

In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified modu...

CVE-2026-95674

In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-22 发布INFO

The MISP installer scripts (for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4) create a log file at /var/log/misp_install.log and a named pipe (FIFO) at /var/log/misp_install...

CVE-2026-95667

The MISP installer scripts (for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4) create a log file at /var/log/misp_ins

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-732

漏洞预警2026-09-22 发布INFO

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoi...

CVE-2026-95666

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to limit the length o

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-22 发布INFO

MISP contains a reflected cross-site scripting (XSS) vulnerability in the event REST search export confirmation form. The view template app/View/Events/ajax/eventRestSearchExpor...

CVE-2026-95665

MISP contains a reflected cross-site scripting (XSS) vulnerability in the event REST search export confirmation form. Th

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-22 发布INFO

A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function move_uploaded_file of the file filemanager.php. Executing a man...

CVE-2026-95499

A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function move_u

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-09-22 发布INFO

A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the ...

CVE-2026-95396

A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unk

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-22 发布INFO

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_vendors_ajax AJAX action that allows authenticated attackers...

CVE-2026-93343

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_ven

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-22 发布INFO

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refund AJAX action that allows authenticated attackers with s...

CVE-2026-93341

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refu

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-22 发布INFO

MISP contains a reflected cross-site scripting (XSS) vulnerability in the attribute histogram view. The $selectedTypes variable, which is derived from the URL path segment , was...

CVE-2026-95661

MISP contains a reflected cross-site scripting (XSS) vulnerability in the attribute histogram view. The $selectedTypes v

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-22 发布INFO

MISP contains a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from th...

CVE-2026-95659

MISP contains a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-79 #cwe-116