2026-09-24 归档

今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argument is converted int...

CVE-2026-77255

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-441

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence attachment upload tools accept arbitrar...

CVE-2026-77253

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, JiraUserMixin._lookup_user_by_permissions uses the module-l...

CVE-2026-77249

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport accepts requests without a us...

CVE-2026-77248

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-306

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence upload tools interpret caller-controlle...

CVE-2026-77247

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false acce...

CVE-2026-77246

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200 #cwe-441

漏洞预警2026-09-22 发布INFO

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req...

CVE-2026-75665

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-22 发布INFO

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires ...

CVE-2026-75658

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-22 发布INFO

Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive ...

CVE-2026-75656

Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-22 发布INFO

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req...

CVE-2026-75649

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-09-22 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulner...

CVE-2026-75632

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-22 发布INFO

js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load() does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at sr...

CVE-2026-63386

js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load() does not bound nesting or dotted-key depth in the recurs

历史摘要 · 未重新核验 · NVD

#cve #cwe-674

漏洞预警2026-09-22 发布INFO

Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder (pH7 Social Dating CMS) through 19.2.0. The CAPTCHA escalation fl...

CVE-2026-37603

Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder (pH7 Soc

历史摘要 · 未重新核验 · NVD

#cve #cwe-307

漏洞预警2026-09-22 发布INFO

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer...

CVE-2026-86056

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler in PowerEditor/src/

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-09-22 发布INFO

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEditor/src/Parameters.c...

CVE-2026-86054

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in Np

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-22 发布INFO

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file whose em...

CVE-2026-85995

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature veri

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-09-22 发布INFO

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WM_MACRODLGRUNMACRO, the Run a Macr...

CVE-2026-85288

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HM

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-345 #cwe-693

漏洞预警2026-09-22 发布INFO

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/src/MISC/...

CVE-2026-85279

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in Pl

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-09-22 发布INFO

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive ...

CVE-2026-83597

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-22 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-pr...

CVE-2026-82003

Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary co

历史摘要 · 未重新核验 · NVD

#cve #cwe-20