2026-09-24 归档

今日共收录 1600 条安全情报,包含 683 个 CVE,518 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-24 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could hav...

CVE-2026-92530

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-24 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have a...

CVE-2026-92529

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-24 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have a...

CVE-2026-92470

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-24 发布INFO

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI comman...

CVE-2026-82370

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the ...

CVE-2026-96680

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main...

CVE-2026-96678

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation leads to stack-bas...

CVE-2026-96676

A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mifi_config.bin of the component Configuration Backup Hand...

CVE-2026-96606

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file M

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Microsoft Outlook Remote Code Execution Vulnerability

CVE-2026-70125

Microsoft Outlook Remote Code Execution Vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to O(n^2) ru...

CVE-2026-59980

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-56120. Reason: This candidate is a duplicate of CVE-2026-56120. Notes: All CVE users should ...

CVE-2026-57168

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-56120. Reason: This candidate is a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the file engine/modules/search.php of the component Search M...

CVE-2026-96604

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user of the file functions.php of the component Admin Handler...

CVE-2026-96603

A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulatio...

CVE-2026-96602

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of t...

CVE-2026-96601

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and...

CVE-2026-86583

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection.

CVE-2026-81537

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.

CVE-2026-81536

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker coul...

CVE-2026-81208

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to imp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via accessi...

CVE-2026-80423

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information

历史摘要 · 未重新核验 · NVD