2026-05-05 归档

今日共收录 918 条安全情报,包含 208 个 CVE,383 篇安全通告,以及 47 篇研究论文。

← 返回归档列表
漏洞预警2026-05-04 发布INFO

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This ...

CVE-2026-42080

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-gener...

CVE-2026-42079

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdow...

CVE-2026-42078

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify ...

CVE-2026-42077

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerabilit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to wr...

CVE-2026-42075

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 2.5.9, before 3.0.0-M3 Description:  The ExtensionLoader....

CVE-2026-42027

Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 2.5.9,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The Dic...

CVE-2026-40682

XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog.

CVE-2026-38669

wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

CVE-2026-37461

An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authenticated users with...

CVE-2026-29514

NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Memory corruption while processing IOCTL command when device is in power-save state.

CVE-2026-25266

Memory corruption while processing IOCTL command when device is in power-save state.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

CVE-2026-24082

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

CVE-2025-47408

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

CVE-2025-47407

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

CVE-2025-47406

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Memory corruption when processing camera sensor input/output control codes with invalid output buffers.

CVE-2025-47405

Memory corruption when processing camera sensor input/output control codes with invalid output buffers.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

CVE-2025-47404

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modif

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

CVE-2025-47403

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireles

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Transient DOS when processing target power rate tables during channel configuration.

CVE-2025-47401

Transient DOS when processing target power rate tables during channel configuration.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query ...

CVE-2026-40563

Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas expose

历史摘要 · 未重新核验 · NVD