2026-05-02 归档

今日共收录 1052 条安全情报,包含 324 个 CVE,429 篇安全通告,以及 17 篇研究论文。

← 返回归档列表
安全公告2026-05-01 发布INFO

Industrial Topic Reward

Industrial Topic Reward

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-01 发布INFO

Relevant Instructions

Relevant Instructions

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-01 发布INFO

Vulnerability Definition

Vulnerability Definition

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-02 发布INFO

MFSA 2026-39Security Vulnerabilities fixed in Thunderbird 140.10.1

MFSA 2026-39Security Vulnerabilities fixed in Thunderbird 140.10.1

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-05-02 发布INFO

MFSA 2026-38Security Vulnerabilities fixed in Thunderbird 150.0.1

MFSA 2026-38Security Vulnerabilities fixed in Thunderbird 150.0.1

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-05-02 发布INFO

Joomla com_breezingforms 任意文件上传漏洞

Joomla com_breezingforms 任意文件上传漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-02 发布INFO

Jenkins JRMP远程代码执行漏洞

Jenkins JRMP远程代码执行漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-02 发布INFO

seacms /htdocs/seacms/member.php id参数 SQL注入

seacms /htdocs/seacms/member.php id参数 SQL注入

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-02 发布INFO

Dswjcms Lib/Action/Admin/BasisAction.class.php id参数等9处SQL注入

Dswjcms Lib/Action/Admin/BasisAction.class.php id参数等9处SQL注入

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-02 发布INFO

NetCommWireless HSPA 3G10WVE 命令执行漏洞

NetCommWireless HSPA 3G10WVE 命令执行漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

漏洞预警2026-05-01 发布INFO

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary data is not properly validated, allow...

CVE-2026-37541

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in function decodeFrame allowing remote attacker...

CVE-2026-37539

Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and dec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Transport_Protocol_Data_Transfer,allows att...

CVE-2026-37534

Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367) in the widget installation flow. Th...

CVE-2026-37531

AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU rac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on data from the filesystem in the FileHandler object.

CVE-2026-42473

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on data from Redis in the RedisHandler object.

CVE-2026-42472

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

A heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a...

CVE-2026-42484

A heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted Kerbe...

CVE-2026-42483

A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of servi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly ex...

CVE-2026-42482

A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: Apache MINA's AbstractIoBuffer.resolveClass() con...

CVE-2026-42779

The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description:

历史摘要 · 未重新核验 · NVD