2026-09-24 归档

今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-23 发布INFO

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/lo...

CVE-2026-75887

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by man

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-23 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-57854

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-23 发布INFO

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verify_login() function in ...

CVE-2026-19125

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and includi

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-23 发布INFO

A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php. Executing a manipulation of the ar...

CVE-2026-96556

A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-09-23 发布INFO

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts o...

CVE-2026-82369

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in ...

CVE-2026-80425

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OS...

CVE-2026-80412

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-23 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in ...

CVE-2026-80379

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-23 发布INFO

A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authentication, and the forwa...

CVE-2026-75886

A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the Catalogd

历史摘要 · 未重新核验 · NVD

#cve #cwe-441

漏洞预警2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an att...

CVE-2026-6935

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequatel

历史摘要 · 未重新核验 · NVD

#cve #cwe-427

漏洞预警2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot "...

CVE-2026-6925

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could s

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and...

CVE-2026-6794

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local

历史摘要 · 未重新核验 · NVD

#cve #cwe-415

漏洞预警2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files.

CVE-2026-6718

IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of appli

历史摘要 · 未重新核验 · NVD

#cve #cwe-276

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler (deps/rabbitmq_web_mqtt/src/rabbit_web_mq...

CVE-2026-67405

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the W

历史摘要 · 未重新核验 · NVD

#cve #cwe-1385

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssl_options/1 falls back to [{verify, ...

CVE-2026-67404

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bu

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_to_regex maps % -> .*? and _ -> ., then compiles ^...$ with only [unicode]; re:run is ca...

CVE-2026-67240

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_to_regex maps % -> .*? and _ ->

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize (a uint64) was stored without validation a...

CVE-2026-67235

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-h

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The cowboy WebSocket options at line 117 set compress => true, enablin...

CVE-2026-67232

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The cowboy We

历史摘要 · 未重新核验 · NVD

#cve #cwe-409

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verify_fun that overrides {bad_cert,...

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-sto

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_vhost/2 calls rabbit_data_coercion:atomize_keys/1 (the unsafe vari...

CVE-2026-67229

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_vhost/2 c

历史摘要 · 未重新核验 · NVD

#cve #cwe-400