2026-09-29 归档

今日共收录 1279 条安全情报，包含 376 个 CVE，505 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll. Such manipulation leads to informatio...

CVE-2026-101083

A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library en

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-09-28 发布INFO

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/Fi...

CVE-2026-101082

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloade

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-28 发布INFO

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path w...

CVE-2026-93348

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code in

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-28 发布INFO

Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.ts, revalidateProducts) in MarcosCamara01 Ecommerce Templ...

CVE-2026-91154

Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-28 发布INFO

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the Se...

CVE-2026-88808

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters

历史摘要 · 未重新核验 · NVD

#cve #cwe-250

漏洞预警2026-09-28 发布INFO

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before ...

CVE-2026-88805

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the acco

历史摘要 · 未重新核验 · NVD

#cve #cwe-613

漏洞预警2026-09-28 发布INFO

Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placi...

CVE-2026-101861

Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows a

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-95

漏洞预警2026-09-28 发布INFO

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skill_scan/tools/dir/dir_actions.py of the component...

CVE-2026-101080

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-28 发布INFO

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/...

CVE-2026-101079

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function i

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-807

漏洞预警2026-09-28 发布INFO

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of th...

CVE-2026-101078

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-653

漏洞预警2026-09-28 发布INFO

WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability (CWE-862) in the built-in server-side file functions pg_file_write(text,text,bool),...

CVE-2026-96538

WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability (CWE-862) in the built-in

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-28 发布INFO

A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLabels and namespaceAnnotations options, the resulting name...

CVE-2026-93540

A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLa

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-09-28 发布INFO

A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is not configured, incoming webhook requests are accepted with...

CVE-2026-93539

A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is no

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-28 发布INFO

A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cluster labels supplied by the registering agent, including...

CVE-2026-93538

A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cl

历史摘要 · 未重新核验 · NVD

#cve #cwe-290 #cwe-639

漏洞预警2026-09-28 发布INFO

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on ...

CVE-2026-80359

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface W

历史摘要 · 未重新核验 · NVD

#cve #cwe-1191

漏洞预警2026-09-28 发布INFO

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on ...

CVE-2026-80358

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface W

历史摘要 · 未重新核验 · NVD

#cve #cwe-1191

漏洞预警2026-09-28 发布INFO

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on ...

CVE-2026-80357

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface W

历史摘要 · 未重新核验 · NVD

#cve #cwe-1191

漏洞预警2026-09-28 发布INFO

Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially e...

CVE-2026-70413

Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low

历史摘要 · 未重新核验 · NVD

#cve #cwe-259

漏洞预警2026-09-28 发布INFO

Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The [ConsoleLogH...

CVE-2026-4556

Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which co

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-28 发布INFO

A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is confi...

CVE-2026-101333

A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and acces

历史摘要 · 未重新核验 · NVD

#cve #cwe-770