Synway SMG Gateway Management Software contains an OS command injection vulnerability in the...
CVE-2025-71284
Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoi
2026-05-01 归档
今日共收录 1019 条安全情报，包含 232 个 CVE，445 篇安全通告，以及 40 篇研究论文。
← 返回归档列表ABB AWIN Gateways
CVE-2025-13777 · CVE-2025-13778
2026年4月30日，CISA发布ICS Advisory ICSA-26-120-05，通报ABB AWIN网关中存在两个安全漏洞。受影响产品包括：运行固件版本2.0-0和2.0-1的ABB AWIN GW100 rev.2，以及运行固件
ABB Ability OPTIMAX
CVE-2025-14510
2026年4月30日，美国网络安全与基础设施安全局（CISA）发布关于ABB Ability OPTIMAX的工业控制系统（ICS）安全通告，涉及一个高危漏洞（CVE-2025-14510），CVSS 3.1评分为8.1。该漏洞存在于ABB
ABB PCM600
CVE-2018-1002208
ABB PCM600 是一款用于保护和控制 IED（智能电子设备）的管理软件，广泛应用于全球关键制造业。CISA 发布 ICS 公告（ICSA-26-120-02），披露了 ABB PCM600 中存在一个路径遍历漏洞（CVE-2018-1
ABB Edgenius Management Portal
CVE-2025-10571
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to send a specially crafted mess
ABB Ability Symphony Plus Engineering
CVE-2023-39417 · CVE-2023-5869
View CSAF Summary ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile 是一款用于管理移动设备的解决方案。该漏洞属于代码注入类型，攻击者可能通过在特定输入参数中注入恶意代码，触发服务端解析执行，从而实现任意代码执行。由于缺乏有效的输入验证和过滤，攻击
Route Services can be leveraged to send app traffic to network destinations outside of an app's...
CVE-2026-22726
Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules.
A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U...
CVE-2026-36960
A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.
Admidio: OIDC Token Introspection Endpoint Returns Active for All Tokens Without Validation
CVE-2026-41671
## Summary The OIDC token introspection endpoint (`/modules/sso/index.php/oidc/introspect`) always returns `{"active":
auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation
CVE-2026-42560
### Summary The Patreon OAuth provider maps every authenticated Patreon account to the same local `user.ID`, instead of
Sentry's improper authentication on SAML SSO process allows user identity linking
CVE-2026-42354
### Impact A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via S
Gotenberg has case-insensitive URL scheme that bypasses webhook and downloadFrom deny-list SSRF protection
CVE-2026-40280
## Vulnerability Details **CWE**: CWE-918 - Server-Side Request Forgery (SSRF) The default private-IP deny-lists for -
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Chromium: CVE-2026-7355 Use after free in Media
CVE-2026-7355
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-7340 Integer overflow in ANGLE
CVE-2026-7340
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-7339 Heap buffer overflow in WebRTC
CVE-2026-7339
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-7341 Use after free in WebRTC
CVE-2026-7341
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-7338 Use after free in Cast
CVE-2026-7338
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-7345 Insufficient validation of untrusted input in Feedback
CVE-2026-7345
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.