2026-05-02 归档

今日共收录 1052 条安全情报,包含 324 个 CVE,429 篇安全通告,以及 17 篇研究论文。

← 返回归档列表
安全公告2026-05-01 发布INFO

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In...

CVE-2026-42469

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the...

CVE-2026-42475

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the joinOn function in BuildHe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out...

CVE-2026-37535

openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the I

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `data` array to the...

CVE-2026-42474

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `data` array to the data function in BuildHe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin...

CVE-2026-37505

SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin/UserController.php, the sort para

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke TCP...

CVE-2026-37552

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke TCP server (Server.php:87) rec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke client ...

CVE-2026-42471

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke client (Connection.php:76) cal

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c...

CVE-2026-37532

AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library. In isotp_continue_re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library....

CVE-2026-37530

AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library. The send_diagnostic_re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in...

CVE-2026-42480

A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could...

CVE-2026-23863

An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function...

CVE-2026-7585

A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amf_nudm_sdm_handle_provisio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A weakness has been identified in Open5GS up to 2.7.7. Affected is the function ogs_id_get_value...

CVE-2026-7586

A weakness has been identified in Open5GS up to 2.7.7. Affected is the function ogs_id_get_value of the file /src/amf/nu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation...

CVE-2026-37525

AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation vulnerability in the supervision

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to...

CVE-2026-22167

Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can...

CVE-2026-22165

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF cras

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Cross-Site Scripting (XSS) in V2Board thru 1.7.4. The custom_html field in theme configuration is...

CVE-2026-37503

Cross-Site Scripting (XSS) in V2Board thru 1.7.4. The custom_html field in theme configuration is rendered using Blade u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A flaw has been found in Open5GS up to 2.7.7. This issue affects the function...

CVE-2026-7583

A flaw has been found in Open5GS up to 2.7.7. This issue affects the function bsf_sess_find_by_ipv6prefix of the file /s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: correctly handle...

CVE-2026-43057

In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial...

CVE-2026-43507

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur v

历史摘要 · 未重新核验 · GitHub Advisory