2026-09-29 归档

今日共收录 1279 条安全情报,包含 376 个 CVE,505 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-28 发布INFO

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Su...

CVE-2026-101007

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_requests/get_attendance_requests of the file hrms/api/__in...

CVE-2026-101006

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Pr...

CVE-2026-101005

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0 - Tabs & Accordions Pro accepts a url option for...

CVE-2026-100751

Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary ...

CVE-2026-100750

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the function cleanCache of the file pages/api/cache.js of the co...

CVE-2026-101004

A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component M...

CVE-2026-101003

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.ph...

CVE-2026-100909

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathFor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overfl...

CVE-2026-100908

A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Par

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes informa...

CVE-2026-100907

A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. The manipulation results in ...

CVE-2026-100906

A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/De

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown functio...

CVE-2026-100904

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the component REST API. Such manipul...

CVE-2026-100903

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component W...

CVE-2026-100902

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file public/stream.php. The manipulation of ...

CVE-2026-100901

A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file /jira-import of th...

CVE-2026-100900

A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/Month...

CVE-2026-100899

A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet...

CVE-2026-100898

A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impacted element is an unknown function of the file /StudentI...

CVE-2026-100897

A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the library libopenarc/arc-canon.c of the ...

CVE-2026-100895

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_pa

历史摘要 · 未重新核验 · NVD