2026-09-30 归档

今日共收录 1598 条安全情报,包含 728 个 CVE,467 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-29 发布INFO

A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a deni...

CVE-2026-76738

A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrat...

CVE-2026-76737

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Success

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local a...

CVE-2026-76736

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful explo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an authenticated loc...

CVE-2026-76735

A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Su...

CVE-2026-76734

A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a de...

CVE-2026-76733

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a l...

CVE-2026-76732

A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Succ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication co...

CVE-2026-76731

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing ...

CVE-2026-76730

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption w...

CVE-2026-76729

A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (...

CVE-2026-76728

A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform ...

CVE-2026-76727

Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certa...

CVE-2026-76726

An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback.

CVE-2026-67993

basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag response parsing on Ruby ...

CVE-2026-67987

crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending team invitation to invite additional attacker-controlled acc...

CVE-2026-61519

Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending tea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to at...

CVE-2026-53989

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-11415

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web agent tools. Authenticated users can bypass hostname valida...

CVE-2026-102879

ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web ag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicio...

CVE-2026-102878

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers

历史摘要 · 未重新核验 · NVD