2026-09-30 归档

今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-28 发布INFO

ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view permission can call the fram...

CVE-2026-102297

ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-28 发布INFO

ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP cameras or intercepting attackers to overfl...

CVE-2026-102296

ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow m

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-09-28 发布INFO

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. T...

CVE-2026-101205

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PC

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-125

漏洞预警2026-09-28 发布INFO

A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image Handler. The manipulation res...

CVE-2026-101204

A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-125

漏洞预警2026-09-28 发布INFO

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-...

CVE-2026-101203

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the c

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-787

漏洞预警2026-09-28 发布INFO

A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. Executing a manipulation can lead to o...

CVE-2026-101202

A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-787

漏洞预警2026-09-28 发布INFO

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers ca...

CVE-2026-101093

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to de

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-28 发布INFO

SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db. Attackers can craft malicious .sy documents with n...

CVE-2026-101091

SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-28 发布INFO

ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The path parameter is ...

CVE-2024-58386

ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-28 发布INFO

A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys ...

CVE-2024-42002

A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-95

漏洞预警2026-09-28 发布INFO

Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry (.desktop) and D-Bus Service (.service) files, instead of validat...

CVE-2026-97027

Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry (.deskto

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-28 发布INFO

Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On multi-user systems with a permissive umask, other local us...

CVE-2026-97026

Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On m

历史摘要 · 未重新核验 · NVD

#cve #cwe-378

漏洞预警2026-09-28 发布INFO

Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-helper's cache directory, allowing other local users on a multi-user ...

CVE-2026-97025

Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-helper's cac

历史摘要 · 未重新核验 · NVD

#cve #cwe-378

漏洞预警2026-09-28 发布INFO

The CoAP link-format helper match_path_uri() in subsys/net/lib/coap/coap_link_format.c compares a registered resource path against the URI carried in a Uri-Query href= option. T...

CVE-2026-18416

The CoAP link-format helper match_path_uri() in subsys/net/lib/coap/coap_link_format.c compares a registered resource pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-28 发布INFO

ieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single fixed 125-byte transmit buffer (tx_frame_buf_pool, sized IEEE802154_MTU). In ...

CVE-2026-18415

ieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single fixed 125-byte trans

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-28 发布INFO

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size field of struct adc_sequence in include/zephyr/drivers/adc....

CVE-2026-18414

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-28 发布INFO

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size field of struct adc_sequence in include/zephyr/drivers/adc....

CVE-2026-18413

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-28 发布INFO

The userspace verifier z_vrfy_rtio_sqe_copy_in_get_handles() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0) validated the RTIO object handle and the ...

CVE-2026-16513

The userspace verifier z_vrfy_rtio_sqe_copy_in_get_handles() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-09-28 发布INFO

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip conf...

CVE-2026-102279

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true

历史摘要 · 未重新核验 · NVD

#cve #cwe-80

漏洞预警2026-09-28 发布INFO

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {...

CVE-2026-102277

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-407