2026-09-24 归档

今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-09-23 发布INFO

MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends in .pkl, which allows a remote attac...

CVE-2026-96775

MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-23 发布INFO

orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default values in new Date() calls. Attackers ...

CVE-2026-96756

orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to e

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-23 发布INFO

Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x2...

CVE-2026-96656

Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-09-23 发布INFO

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.

CVE-2026-96655

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses v

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-23 发布INFO

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their ow...

CVE-2026-96654

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-84

漏洞预警2026-09-23 发布INFO

Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force t...

CVE-2026-96652

Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can i

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-23 发布INFO

Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/get'. A ...

CVE-2026-96651

Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-23 发布INFO

A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipulation o...

CVE-2026-96514

A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the file AddProductCode.php. The manipulation of the argument im...

CVE-2026-96513

A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-09-23 发布INFO

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.in...

CVE-2026-95848

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class canno

历史摘要 · 未重新核验 · NVD

#cve #cwe-636

漏洞预警2026-09-23 发布INFO

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue_ plus the client ID and its metadata-map name as que...

CVE-2026-95847

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as q

历史摘要 · 未重新核验 · NVD

#cve #cwe-99

漏洞预警2026-09-23 发布INFO

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and reserv...

CVE-2026-95846

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will messa

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-23 发布INFO

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues. When a fast publisher sends mes...

CVE-2026-95845

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending pe

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-23 发布INFO

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic filters before processing them through recursive CTrie in...

CVE-2026-95844

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic

历史摘要 · 未重新核验 · NVD

#cve #cwe-674

漏洞预警2026-09-23 发布INFO

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.subscribe parses a shared-subscription filter through SharedSubscriptionUtils.extractShareName before val...

CVE-2026-95843

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.subscribe parses a shared-subscription filter th

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-23 发布INFO

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, SessionEventLoop.run catches only InterruptedException, and SessionEventLoopGroup does not restart a terminated loop...

CVE-2026-95842

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, SessionEventLoop.run catches only InterruptedException, and

历史摘要 · 未重新核验 · NVD

#cve #cwe-248

漏洞预警2026-09-23 发布INFO

Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descript...

CVE-2026-93349

Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-23 发布INFO

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images.

CVE-2026-88832

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-23 发布INFO

Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through 1.25.2 allows a malicious or compromised ...

CVE-2026-6669

Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in Pg

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-23 发布INFO

Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input m...

CVE-2026-6668

Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-835