2026-05-02 归档

今日共收录 1052 条安全情报,包含 324 个 CVE,429 篇安全通告,以及 17 篇研究论文。

← 返回归档列表
漏洞预警2026-05-01 发布INFO

The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: The fix for CVE-2024-52046 in Apache MINA AbstractIoBuff...

CVE-2026-42778

The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybe_logi...

CVE-2026-7567

The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The impacted element is the function find_host_ip of the component lighttpd. Such manipulat...

CVE-2026-7546

A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The impacted element is the functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function Vulnerability of the file /cgi-bin/cstecgi.cgi of the component CGI Handl...

CVE-2026-7538

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function Vulnerability of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or ...

CVE-2026-40687

In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an in...

CVE-2026-40685

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check.  A malicious actor could cause user...

CVE-2026-2311

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's ...

CVE-2026-39858

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's ForwardAuth m...

CVE-2026-35051

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authe

历史摘要 · 未重新核验 · NVD

安全公告2026-05-02 发布INFO

A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the...

CVE-2026-7601

A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function...

CVE-2026-7600

A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext...

CVE-2026-43824

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load...

CVE-2026-7597

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0. This affects the function save_document...

CVE-2026-7599

A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0. This affects the function save_document/export_to_text/export_t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the...

CVE-2026-7598

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_passwo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by...

CVE-2026-7596

A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this issue is the functi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to 0...

CVE-2026-7593

A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to 0.1.0. This impacts the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11...

CVE-2025-52347

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and Perf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to...

CVE-2026-7590

A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to 69bc71874ce40050ef45fde5a435855f18af3373. The af

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A weakness has been identified in itsourcecode Courier Management System 1.0. This affects an...

CVE-2026-7592

A weakness has been identified in itsourcecode Courier Management System 1.0. This affects an unknown function of the fi

历史摘要 · 未重新核验 · GitHub Advisory