2026-05-05 归档

今日共收录 918 条安全情报,包含 208 个 CVE,383 篇安全通告,以及 47 篇研究论文。

← 返回归档列表
漏洞预警2026-05-04 发布INFO

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users ar...

CVE-2026-24072

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Inje...

CVE-2026-3120

Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST...

CVE-2026-7750

A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Requ...

CVE-2026-7749

A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Req...

CVE-2026-7748

A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake frag...

CVE-2026-33846

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /product_expiry/edit-admin.php. Su...

CVE-2026-7746

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineClassroom/facultydetails. This manipulation of the argument...

CVE-2026-7745

A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineCl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassroom/addnewstudent. The manipulation of the argument fname ...

CVE-2026-7744

A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the file /OnlineClassroom/studentdetails. The manipulation of th...

CVE-2026-7743

A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /OnlineClassroom/facultylogin. Executing a manipulation of the a...

CVE-2026-7742

A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /Online

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argum...

CVE-2026-7741

A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClass

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A security vulnerability has been detected in justdan96 tsMuxer up to 2.7.0. This issue affects the function VvcVpsUnit::setFPS of the file tsMuxer/vvc.cpp. Such manipulation of...

CVE-2026-7740

A security vulnerability has been detected in justdan96 tsMuxer up to 2.7.0. This issue affects the function VvcVpsUnit:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A weakness has been identified in justdan96 tsMuxer up to 2.7.0. This vulnerability affects the function HevcVpsUnit::setFPS of the file /AFLplusplus/tsMuxer_prev/tsMuxer/hevc.c...

CVE-2026-7739

A weakness has been identified in justdan96 tsMuxer up to 2.7.0. This vulnerability affects the function HevcVpsUnit::se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A security flaw has been discovered in puchunjie doc-tools-mcp 1.0.18. This affects the function create_document/open_document of the file src/mcp-server.ts of the component MCP...

CVE-2026-7738

A security flaw has been discovered in puchunjie doc-tools-mcp 1.0.18. This affects the function create_document/open_do

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/pa...

CVE-2026-7737

A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.P

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulatio...

CVE-2026-7736

A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

The Magic Export & Import WordPress plugin before 1.2.0 stores exported CSV files at a publicly accessible location, making it possible for any visitors to leak sensitive user i...

CVE-2026-5335

The Magic Export & Import WordPress plugin before 1.2.0 stores exported CSV files at a publicly accessible location, mak

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

CVE-2026-43864

mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.

CVE-2026-43863

mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.

历史摘要 · 未重新核验 · NVD