2026-09-29 归档

今日共收录 1279 条安全情报,包含 376 个 CVE,505 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-28 发布INFO

The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API relies on lexical containment checks that do not acco...

CVE-2026-101894

The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the component Web Adminis...

CVE-2026-101081

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before ...

CVE-2026-88804

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submi...

CVE-2026-12342

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the Id

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes missing authentication....

CVE-2026-101077

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI Handler. The manipulation of ...

CVE-2026-101076

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi of the component Location Tim...

CVE-2026-101075

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing ...

CVE-2026-101074

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords...

CVE-2026-90924

Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client...

CVE-2026-87799

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary...

CVE-2026-85526

Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with perm...

CVE-2026-85185

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.cgi of the component CGI Handler. Such manipulation of the...

CVE-2026-101072

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover Service. Such manipulation l...

CVE-2026-101039

A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipula...

CVE-2026-101038

A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affected is the function parse_advertisement_frame of the component devdiscover Service. The manipulation results ...

CVE-2026-101037

A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affected is the function parse_advertisement_frame of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC end...

CVE-2026-82384

Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserializat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog content belonging to other weblogs through the legacy XML-RPC Blogger...

CVE-2026-82377

Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog content belo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files.py of the component File Merge Handl...

CVE-2026-101008

A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/serv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tools of the component Tools Ping Handler...

CVE-2026-101002

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /

历史摘要 · 未重新核验 · NVD