2026-05-12 归档

今日共收录 1165 条安全情报,包含 386 个 CVE,425 篇安全通告,以及 70 篇研究论文。

← 返回归档列表
安全公告2026-05-12 发布INFO

【语音识别】关于《语音识别服务条款》更新的通知

【语音识别】关于《语音识别服务条款》更新的通知

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-05-12 发布INFO

【语音合成】关于《语音合成服务条款》更新的通知

【语音合成】关于《语音合成服务条款》更新的通知

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-05-12 发布INFO

macOS Tahoe 26.5

macOS Tahoe 26.5

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-05-12 发布INFO

macOS Sequoia 15.7.7

macOS Sequoia 15.7.7

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-05-12 发布INFO

macOS Sonoma 14.8.7

macOS Sonoma 14.8.7

历史摘要 · 未重新核验 · Apple Security Releases

漏洞预警2026-05-11 发布INFO

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, a Cross-Site Scripting (XSS) vulnerability exis...

CVE-2026-43900

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, An incomplete mitigation for CVE-2025-55733 lea...

CVE-2026-43899

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

oxyno-zeta/s3-proxy is an aws s3 proxy written in go. Prior to 5.0.0, s3-proxy contains an authentication bypass caused by inconsistent URL path interpretation between the authe...

CVE-2026-42882

oxyno-zeta/s3-proxy is an aws s3 proxy written in go. Prior to 5.0.0, s3-proxy contains an authentication bypass caused

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret...

CVE-2026-42869

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/raid/jira_bot endpoint (CreateJiraBotView) is reachable without authentication (...

CVE-2026-42864

FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/raid/jira_bot endpoint

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules. Multiple endpoints fetched us...

CVE-2026-7813

Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Proces

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Login plugin accepts attacker-controlled groups and access fields from the registra...

CVE-2026-42613

Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Login plugin accepts attac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with administrative privileges can achieve Remote Code Execution (RCE) by uploading a specially c...

CVE-2026-42607

Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with administrative privileges can achie

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker wit...

CVE-2026-40636

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded c

历史摘要 · 未重新核验 · NVD

安全公告2026-05-12 发布INFO

Due to insufficient authorization checks in the SAP Incentive and Commission Management...

CVE-2026-40134

Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-12 发布INFO

Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in...

CVE-2026-40132

Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in Business Server Pages), a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-12 发布INFO

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated...

CVE-2026-40133

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthoriz

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-12 发布INFO

Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP...

CVE-2026-40129

Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-12 发布INFO

An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and...

CVE-2026-40135

An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-12 发布INFO

SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically...

CVE-2026-40131

SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically constructed using user

历史摘要 · 未重新核验 · GitHub Advisory