2026-05-01 归档

今日共收录 1019 条安全情报,包含 232 个 CVE,445 篇安全通告,以及 40 篇研究论文。

← 返回归档列表
安全公告2026-05-01 发布INFO

Alert for CVE-2021-44228

CVE-2021-44228

Alert for CVE-2021-44228

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-05-01 发布INFO

Linux 内核提权 CVE-2026-31431(copy-fail)

CVE-2026-31431

Linux 内核提权 CVE-2026-31431(copy-fail)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-01 发布INFO

【安全通告】Linux Kernel 本地权限提升漏洞风险通告(CVE-2026-31431)

CVE-2026-31431

【安全通告】Linux Kernel 本地权限提升漏洞风险通告(CVE-2026-31431)

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-04-29 发布INFO

Long Term Support Channel Update for ChromeOS

CVE-2026-4456 · CVE-2026-4680 · CVE-2026-6297 · CVE-2026-4675

A new LTS-144  version 144.0.7559.249 (Platform Version: 16503.81.0), is being rolled out for most ChromeOS devices. Thi

历史摘要 · 未重新核验 · Google Chrome Releases

漏洞预警2026-04-30 发布INFO

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variab...

CVE-2026-28532

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.0.0. The device does not implement CSRF protection mechan...

CVE-2026-36960

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform un...

CVE-2026-36959

U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on...

CVE-2026-36958

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET req...

CVE-2026-36957

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSR...

CVE-2026-36956

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireles

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6522

RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to caus...

CVE-2026-7426

Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of...

CVE-2026-7425

Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

CVE-2026-0206

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewal

历史摘要 · 未重新核验 · NVD

威胁情报2026-05-01 发布INFO

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

CVE-2026-20929

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-04-30 发布INFO

Critical cPanel and WHM bug exploited as a zero-day, PoC now available

CVE-2026-41940

The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploit

历史摘要 · 未重新核验 · BleepingComputer

漏洞预警2026-05-01 发布CRITICAL

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function Vulnerability of the file /cgi-bin/cstecgi.cgi of the component CGI Handl...

CVE-2026-7538

CVE-2026-7538 影响 Totolink A8000RU 路由器固件版本 7.1cu.643_b20200521。漏洞位于 /cgi-bin/cstecgi.cgi 文件的 CGI 处理程序中,具体在 Vulnerability

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

Compatibility Test Suite (CTS)

Android 兼容性测试套件 (CTS) 是 Google 官方提供的工具集,用于验证 Android 设备是否符合平台兼容性要求,确保应用能在不同设备上一致运行。CTS 包含大量测试用例,覆盖 API、权限、多媒体、网络等多个方面。虽然

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-05-01 发布INFO

Compatibility Definition Document (CDD)

Android 兼容性定义文档(CDD)是 Android 生态系统的核心规范,旨在确保所有 Android 设备在应用兼容性、硬件一致性、安全要求等方面符合 Google 制定的标准。该文档详细描述了 Android 平台各个版本的强制性

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-05-01 发布INFO

Tools, build, and related reference

该输入是Android安全公告中关于构建工具和相关参考文档的页面,标题为"Tools, build, and related reference"。页面内容未提供具体漏洞信息、CVE列表或严重性评估。截至2026年5月1日,该条目仅为开发者

历史摘要 · 未重新核验 · Android Security Bulletin