2026-09-24 归档

今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-23 发布INFO

Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks because each abs...

CVE-2026-61814

Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON tok

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-407

漏洞预警2026-09-23 发布INFO

Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker wh...

CVE-2026-59990

Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nes

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-23 发布INFO

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and use...

CVE-2026-55632

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompleti

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-23 发布INFO

Rejected reason: This CVE is a duplicate of another CVE.

CVE-2026-55456

Rejected reason: This CVE is a duplicate of another CVE.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-23 发布INFO

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines/**/upstream does not adequat...

CVE-2026-52744

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API a

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-23 发布INFO

LimeSurvey fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface.

CVE-2026-91775

LimeSurvey fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import war

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-23 发布INFO

BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.

CVE-2026-88840

BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-23 发布INFO

BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers.

CVE-2026-88839

BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of he

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-23 发布INFO

BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.

CVE-2026-88837

BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authenticati

历史摘要 · 未重新核验 · NVD

#cve #cwe-305

漏洞预警2026-09-23 发布INFO

BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read.

CVE-2026-88835

BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-23 发布INFO

BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.

CVE-2026-88831

BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the ru

历史摘要 · 未重新核验 · NVD

#cve #cwe-636

漏洞预警2026-09-23 发布INFO

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malic...

CVE-2026-86938

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-23 发布INFO

An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Pu...

CVE-2026-86934

An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an exten

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-23 发布INFO

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory du...

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted imag

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-23 发布INFO

A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption,...

CVE-2026-86926

A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-23 发布INFO

Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access con...

CVE-2026-86867

Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabiliti

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-23 发布INFO

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18944. Reason: This candidate is a reservation duplicate of CVE-2026-18944. Notes: All CVE u...

CVE-2026-18944

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18944. Reason: This candidate is a

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-23 发布INFO

In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal ...

CVE-2026-96808

In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivi

历史摘要 · 未重新核验 · NVD

#cve #cwe-61

漏洞预警2026-09-23 发布INFO

In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files at an arbitrary location. The...

CVE-2026-96807

In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regener

历史摘要 · 未重新核验 · NVD

#cve #cwe-61

漏洞预警2026-09-23 发布INFO

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load_model(), which allows a remote attac...

CVE-2026-96804

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security contr

历史摘要 · 未重新核验 · NVD

#cve #cwe-502