2026-05-04 归档

今日共收录 673 条安全情报,包含 62 个 CVE,343 篇安全通告,以及 15 篇研究论文。

← 返回归档列表
安全公告2026-05-03 发布INFO

A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance...

CVE-2026-7696

A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-03 发布INFO

A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and...

CVE-2026-7695

A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-03 发布INFO

A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the...

CVE-2026-7679

A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-03 发布INFO

A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function...

CVE-2026-7678

A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file y

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-03 发布INFO

A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function...

CVE-2026-7669

A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file pytho

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-03 发布INFO

A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The...

CVE-2026-7671

A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unk

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is...

CVE-2026-7653

A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is the function open_image_

历史摘要 · 未重新核验 · GitHub Advisory

威胁情报2026-05-04 发布INFO

Firewall for AI

Akamai 安全研究团队发布了名为 'Firewall for AI' 的新型安全产品,旨在保护人工智能应用免受分布式拒绝服务攻击和僵尸网络等网络威胁。该产品利用 Akamai 的全球网络智能和机器学习能力,实时检测并缓解针对 AI 工作

历史摘要 · 未重新核验 · Akamai Security Research

漏洞预警2026-05-04 发布CRITICAL

A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227. The affected element is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component POST...

CVE-2026-7719

CVE-2026-7719 是一个影响 Totolink WA300 路由器(固件版本 5.2cu.7112_B20190227)的严重缓冲区溢出漏洞。该漏洞位于设备 Web 管理接口的 /cgi-bin/cstecgi.cgi 文件中,具

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布CRITICAL

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code exe...

CVE-2026-7372

CVE-2026-7372 是 GeoVision GV-VMS V20 20.0.2 版本中 WebCam 服务器登录功能存在的一个栈溢出漏洞。漏洞成因在于处理 HTTP 请求中的 Authorization 头时,程序使用 sscanf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布CRITICAL

An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to cr...

CVE-2026-7161

CVE-2026-7161 是一个存在于 GeoVision GV-IP Device Utility 9.0.5 设备认证功能中的加密不足漏洞。该工具在与网络中的 Geovision 设备交互时,会发送特权命令,需要提供设备的用户名和密码

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布CRITICAL

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code exe...

CVE-2026-42370

GeoVision GV-VMS V20 20.0.2 中的 WebCam Server 登录功能存在栈溢出漏洞。该漏洞位于登录模块中,由于未对用户输入的长度进行充分检查,当攻击者发送特制的 HTTP 请求时,可触发栈缓冲区溢出,进而导致任

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布CRITICAL

GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices. It is a native application accessed locally, b...

CVE-2026-42369

CVE-2026-42369 影响 Geovision 的 GV-VMS V20 视频监控软件。该软件允许通过“WebCam Server”功能启用远程 Web 访问。其 Web 服务器组件未启用地址空间布局随机化(ASLR),且存在一个栈

历史摘要 · 未重新核验 · NVD

威胁情报2026-05-04 发布INFO

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

2026年5月4日,CrowdStrike发布博文宣布其在Frost & Sullivan发布的2026年云原生应用保护平台(CNAPP)雷达报告中被评为领导者。该报告评估了多家云安全厂商的能力,CrowdStrike凭借其Falcon平台

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-04 发布INFO

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

CrowdStrike 宣布将其 Falcon 平台的实时云检测与响应(CDR)能力扩展到 Google Cloud 环境。该集成使安全团队能够在 Google Cloud 中实时监控、检测和响应威胁,利用 CrowdStrike 的威胁情

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-04 发布INFO

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-04 发布INFO

Security & Identity

Security & Identity

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-04 发布INFO

SAP on Google Cloud

SAP on Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-04 发布INFO

Inside Google Cloud

Inside Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-04 发布INFO

Google Cloud Next & Events

Google Cloud Next & Events

历史摘要 · 未重新核验 · Mandiant