2026-09-25 归档

今日共收录 784 条安全情报,包含 0 个 CVE,390 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-09-25 发布INFO

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later...

CVE-2026-85491

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorizat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-25 发布INFO

Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be...

CVE-2026-97636

Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-co

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A spec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function...

CVE-2026-97368

A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function UserServiceImpl.userInf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted...

CVE-2026-97366

A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its...

CVE-2026-87118

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functiona

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

Espruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerability in the...

CVE-2026-88388

Espruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parse_tiff_ifd()...

CVE-2026-88387

LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parse_tiff_ifd() when processing TIFF ta

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

The Botslab G980H dash camera firmware does not require authenticated pairing or client binding...

CVE-2026-84403

The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows...

CVE-2026-93353

copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware...

CVE-2026-81630

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update proce

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function...

CVE-2026-97365

A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file cr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected...

CVE-2026-97325

A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be...

CVE-2026-79959

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. A

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before...

CVE-2026-14443

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extensio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server...

CVE-2026-82708

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with acce

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A weakness has been identified in songxinjianqwe Chat up to...

CVE-2026-97326

A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is...

CVE-2026-97324

A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoO

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

An information exposure vulnerability in the job scheduling component of SANnav allows sensitive...

CVE-2026-14442

An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be writt

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

The Botslab G980H dash camera firmware includes sensitive configuration information, including...

CVE-2026-82716

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diag

历史摘要 · 未重新核验 · GitHub Advisory