Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
CVE-2024-27348
Apache HugeGraph-Server Command Execution In Gremlin（CVE-2024-27348）
2026-05-09 归档
今日共收录 1190 条安全情报，包含 490 个 CVE，393 篇安全通告，以及 21 篇研究论文。
← 返回归档列表Zabbix 后台延时注入(CVE-2024-22120)
CVE-2024-22120
Zabbix 后台延时注入(CVE-2024-22120)
CrushFTP 认证绕过漏洞（CVE-2024-4040）
CVE-2024-4040
CrushFTP 认证绕过漏洞（CVE-2024-4040）
Alert for CVE-2026-21992
CVE-2026-21992
Alert for CVE-2026-21992
Alert for CVE-2025-61884
CVE-2025-61884
Alert for CVE-2025-61884
Alert for CVE-2025-61882
CVE-2025-61882
Alert for CVE-2025-61882
Alert for CVE-2024-21287
CVE-2024-21287
Alert for CVE-2024-21287
Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
【安全通告】Linux Kernel 本地权限提升漏洞风险通告（CVE-2026-31431）
CVE-2026-31431
【安全通告】Linux Kernel 本地权限提升漏洞风险通告（CVE-2026-31431）
@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module
Security Advisory: OS Command Injection in profullstack/mcp-server domain_lookup Module Field | Value -- | -- Project
@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry
# Docker registry auth substring match forwards credentials to a different registry ## Repository `cdxgen/cdxgen` ##
Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access
CVE-2026-6973
Ivanti is warning that a new security flaw impacting Endpoint Manager Mobile (EPMM) has been explored in limited attacks
Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks
CVE-2026-6973
CVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary cod
CLAD: A Clustered Label-Agnostic Federated Learning Framework for Joint Anomaly Detection and Attack Classification
该论文提出了一个名为CLAD的综合框架，用于解决物联网（IoT）和工业物联网（IIoT）环境下的入侵检测问题。随着IoT设备的激增，网络攻击面大幅扩大，传统集中式入侵检测系统面临隐私和扩展性挑战。联邦学习（FL）提供了一种隐私保护方案，但现
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in ...
CVE-2026-42339
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.1
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in the Stripe webhook h...
CVE-2026-41432
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to versio
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.67.0, Scoold allows the admins configuration value to be modified through /api/config/set/admins w...
CVE-2026-42176
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.67.0, Scoold allows the admins configurat
Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixi...
CVE-2026-43967
Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service v