2026-09-23 归档

今日共收录 1513 条安全情报,包含 580 个 CVE,548 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2026-09-22 发布INFO

MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedActions list. In CakePHP, listing an action in unlockedActions disable...

CVE-2026-95658

MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedActions list.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an und...

CVE-2026-95619

A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A vulnerability was determined in dgtlmoon changedetection.io up to 0.60.7. This impacts the function static_content of the file changedetectionio/flask_app.py of the component ...

CVE-2026-95273

A vulnerability was determined in dgtlmoon changedetection.io up to 0.60.7. This impacts the function static_content of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function static_content of the file changedetectionio/flask_app.py of the component Scree...

CVE-2026-95272

A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function static_content of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function check_authentication of the file changedetectionio/flask_app.py ...

CVE-2026-95271

A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function check_a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API.

CVE-2026-75791

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerabi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function check_password of the file changedetectionio/flask_app.py of the componen...

CVE-2026-95270

A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function check_password o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charged. MPP.Session.Ac...

CVE-2026-89420

Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Authentication Bypass by Capture-replay in ZenHive mpp allows an attacker holding a captured subscription activation credential to charge the payer repeatedly. The payer signs ...

CVE-2026-87119

Authentication Bypass by Capture-replay in ZenHive mpp allows an attacker holding a captured subscription activation cre

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held ...

CVE-2026-63279

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a docum...

CVE-2026-63278

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer ove...

CVE-2026-63276

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and C

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against th...

CVE-2026-63275

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and...

CVE-2026-63274

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's ow...

CVE-2026-63273

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The leng

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance width...

CVE-2026-63272

LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HT...

CVE-2026-95623

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15, <2.4.0p37, <2.3.0p51 and 2.2.0 (EOL) allows an authenti...

CVE-2026-92882

Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 allows an authenticated user to inject additional Livestat...

CVE-2026-90990

Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. ...

CVE-2026-94117

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar –

历史摘要 · 未重新核验 · NVD