2026-05-02 归档

今日共收录 1052 条安全情报,包含 324 个 CVE,429 篇安全通告,以及 17 篇研究论文。

← 返回归档列表
安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix...

CVE-2026-43039

In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix missing data copy and wr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL...

CVE-2026-43043

In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in sc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to...

CVE-2026-43047

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[]...

CVE-2026-43038

In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of...

CVE-2026-43051

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in...

CVE-2026-43053

In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivatio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent...

CVE-2026-43049

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on forc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync:...

CVE-2026-43022

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() retu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject...

CVE-2026-43024

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore...

CVE-2026-43025

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure...

CVE-2026-43028

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-terminate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets)

CVE-2026-42461

### Summary Four `GET` endpoints under `/api/templates*` in Arcane's Huma backend are registered without any `Security`

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`

CVE-2026-42032

### Impact A vulnerability in `datastore_search_sql` allowed attackers to bypass authorization in order to gain access

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

Weblate Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url

CVE-2026-41654

### Impact An authenticated user with `project.add` permission (default on hosted Weblate SaaS and for any user holding

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

CVE-2026-40171

### Impact A stored Cross-Site Scripting (XSS) vulnerability in Jupyter Notebook allows attackers to steal authenticati

历史摘要 · 未重新核验 · GitHub Advisory

威胁情报2026-05-02 发布INFO

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-05-02 发布INFO

京公网安备 11000002002063号

输入数据异常:标题为公安机关备案号,来源链接指向公安备案查询页面,而非安全报告内容。其余字段均为空或默认值,无法提取有效威胁情报。可能为数据错误或测试用例。

历史摘要 · 未重新核验 · 360CERT 安全报告

威胁情报2026-05-02 发布INFO

(总)网出证(京)字第281号

该页面为360公司的网络出版许可证信息(网出证(京)字第281号),并非实际的威胁情报报告。来源为360CERT安全报告,但摘要内容为空,无任何技术细节或攻击活动描述。标签包含apt、report、360、malware,但无具体数据支撑。

历史摘要 · 未重新核验 · 360CERT 安全报告

威胁情报2026-05-02 发布INFO

京网文〔2020〕6051-1195号

本文标题为“京网文〔2020〕6051-1195号”,来源为360CERT安全报告,但未提供正文摘要或具体内容。标签显示涉及APT、恶意软件、360和报告,然而由于缺乏技术细节、攻击链、IOC等信息,无法对攻击活动、影响范围或防御措施进行有

历史摘要 · 未重新核验 · 360CERT 安全报告

威胁情报2026-05-02 发布INFO

京ICP证080047号[京ICP备08010314号-6]

本报告标题为“京ICP证080047号[京ICP备08010314号-6]”,来源标注为360CERT安全报告,但实际链接至工信部备案查询网站,且无正文内容。tags包含apt、report、360、malware,暗示可能涉及APT攻击活

历史摘要 · 未重新核验 · 360CERT 安全报告