2026-05-02 归档

今日共收录 1052 条安全情报，包含 324 个 CVE，429 篇安全通告，以及 17 篇研究论文。

← 返回归档列表

漏洞预警2026-05-01 发布INFO

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-67968. Reason: This candidate is a reservation duplicate of CVE-2025-67968. Notes: All CVE u...

CVE-2025-12993

此 CVE 编号已被拒绝，原因是与 CVE-2025-67968 重复预留。所有用户应参考 CVE-2025-67968 而非此编号。所有引用和描述已被移除以防止误用。因此，该 CVE 不代表任何实际漏洞，无需采取安全措施。

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-2052. Reason: This candidate is a reservation duplicate of CVE-2026-2052 Notes: All CVE user...

CVE-2025-8903

CVE-2025-8903 是一个已被拒绝的CVE记录。根据NVD提供的元数据，该候选编号的分配原因是与另一个CVE编号 CVE-2026-2052 存在重复保留（reservation duplicate）。因此，安全社区不应使用此编号，

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布HIGH

A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to 69bc71874ce40050ef45fde5a435855f18af3373. The affected element is an unknown function of the file branch_...

CVE-2026-7590

CVE-2026-7590 是 eyal-gor 开发的 p_69_branch_monkey_mcp 项目中的一个操作系统命令注入漏洞。该漏洞存在于 branch_monkey_mcp/bridge_and_local_actions/r

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-01 发布INFO

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function create_csv_export of the file servi...

CVE-2026-7589

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Imp

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-05-01 发布INFO

flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function.

CVE-2026-30363

flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function.

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-05-01 发布INFO

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers to access k...

CVE-2025-52347

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and Perf

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-269

漏洞预警2026-05-01 发布INFO

A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function get_style_guide/get_best_practices of the file server.py. The manipulation of the argum...

CVE-2026-7588

A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function get_style_guide/get_best_pract

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-05-01 发布INFO

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a De...

CVE-2026-37457

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of F

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-05-01 发布INFO

An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instrument...

CVE-2026-35233

An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link f

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-05-01 发布INFO

A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted we...

CVE-2026-26461

A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticate

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-05-01 发布INFO

An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()

CVE-2026-21996

An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an intege

历史摘要 · 未重新核验 · NVD

#cve #cwe-369

漏洞预警2026-05-01 发布INFO

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid value in any Boolean f...

CVE-2025-63548

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet spe

历史摘要 · 未重新核验 · NVD

#cve #cwe-241

漏洞预警2026-05-01 发布INFO

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field

CVE-2025-63547

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-805

漏洞预警2026-05-01 发布INFO

A vulnerability has been found in Open5GS up to 2.7.7. This vulnerability affects the function amf_nsmf_pdusession_handle_update_sm_context of the file /src/amf/nsmf-handler.c o...

CVE-2026-7587

A vulnerability has been found in Open5GS up to 2.7.7. This vulnerability affects the function amf_nsmf_pdusession_handl

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-05-01 发布INFO

AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library. The send_diagnostic_request function in uds.c allocates a 6-byte stack buffer (MAX_DIAGNOSTI...

CVE-2026-42485

AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library. The send_diagnostic_request functio

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-05-01 发布INFO

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowi...

CVE-2026-42469

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-05-01 发布INFO

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote...

CVE-2026-42468

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-05-01 发布INFO

An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Binary_Data_Transfer_DM16 causing a denial of servi...

CVE-2026-42467

An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-05-01 发布INFO

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit...

CVE-2026-37540

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-05-01 发布INFO

Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted bu...

CVE-2026-37538

Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a deni

历史摘要 · 未重新核验 · NVD

#cve #cwe-121