2026-05-01 归档

今日共收录 1019 条安全情报,包含 232 个 CVE,445 篇安全通告,以及 40 篇研究论文。

← 返回归档列表
安全公告2026-05-01 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-4178

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is...

CVE-2026-7510

A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionali

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary...

CVE-2026-6543

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes...

CVE-2025-14688

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i...

CVE-2026-2311

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes...

CVE-2026-1577

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on...

CVE-2026-3345

IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system. An attacker c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text...

CVE-2025-36335

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a lo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between...

CVE-2025-36180

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes...

CVE-2025-36122

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the...

CVE-2026-7435

SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel...

CVE-2026-6539

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to...

CVE-2026-4502

IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function...

CVE-2026-7501

A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to...

CVE-2026-40949

CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with lo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to...

CVE-2026-33450

CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client...

CVE-2026-33451

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers w

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting....

CVE-2026-3346

IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting. This vulnerability allows

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view...

CVE-2026-4503

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50....

CVE-2026-40950

CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of

历史摘要 · 未重新核验 · GitHub Advisory