2026-04-28 归档

今日共收录 1050 条安全情报,包含 258 个 CVE,457 篇安全通告,以及 29 篇研究论文。

← 返回归档列表
漏洞预警2026-04-27 发布INFO

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4.

CVE-2026-22337

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Boo...

CVE-2026-22336

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Directorist Bookin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a...

CVE-2026-41409

The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist of classe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types) does not check the class at all, bypassing the classname...

CVE-2026-41635

Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payload of incoming JMS ObjectMessage values via javax.jms.Obje...

CVE-2026-40860

JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payloa

历史摘要 · 未重新核验 · NVD

安全公告2026-04-28 发布INFO

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The...

CVE-2026-7265

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

An unsecured configuration interface on affected devices allows unauthenticated remote attackers...

CVE-2026-3323

An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive inf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing...

CVE-2026-7280

AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the...

CVE-2026-7268

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save_category o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element...

CVE-2026-7266

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function save_o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language...

CVE-2026-41602

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue af

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache...

CVE-2026-41636

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23...

CVE-2026-41604

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommen

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the...

CVE-2026-7264

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function get_cart_items o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift:...

CVE-2026-41605

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. ...

CVE-2025-48431

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apach

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated...

CVE-2026-7279

AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to plac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before...

CVE-2026-41606

Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are reco

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue...

CVE-2026-41603

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift:

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23...

CVE-2026-41607

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommen

历史摘要 · 未重新核验 · GitHub Advisory