2026-09-24 归档

今日共收录 1600 条安全情报,包含 683 个 CVE,518 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-23 发布INFO

TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is...

CVE-2026-91776

TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a String...

CVE-2026-89425

UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error me

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file recommenders/models/newsrec/io/mind_iterator...

CVE-2026-95928

A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/pretest/exam-...

CVE-2026-95927

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/pr...

CVE-2026-95926

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unkno

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that leaves domain objects permanentl...

CVE-2026-96273

Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexO

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows authenticated users to create share links for albums owned ...

CVE-2026-96271

Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/databan...

CVE-2026-95925

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown fu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/databank/btn_f...

CVE-2026-95924

A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py of the component Loader. Such manipula...

CVE-2026-95897

A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqli_query...

CVE-2026-95868

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the arg...

CVE-2026-95833

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown processing of the file /post_upload.p...

CVE-2026-95830

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-api/src...

CVE-2026-95829

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function Paginatio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backu...

CVE-2026-94367

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptogr...

CVE-2026-92930

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design tha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An una...

CVE-2026-92929

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or ro...

CVE-2026-92928

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the file Front-end/server.php of the component Authentication. E...

CVE-2026-95828

A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file...

CVE-2026-95820

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affecte

历史摘要 · 未重新核验 · NVD