2026-05-22 归档

今日共收录 1105 条安全情报,包含 281 个 CVE,422 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-05-20 发布INFO

NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple syst...

CVE-2026-24218

NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes id

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might le...

CVE-2026-24217

NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe...

CVE-2026-24216

NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A succes

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to data tampering.

CVE-2026-24188

NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to read configuration files by using URLs such as http://loc...

CVE-2026-23734

XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer co...

CVE-2026-30691

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21, 10.0.2503....

CVE-2026-20240

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.26

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role tha...

CVE-2026-20239

In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted through `srch...

CVE-2026-20238

In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

InfoScale VIOM 9.1.3 allows XSS.

CVE-2026-44924

InfoScale VIOM 9.1.3 allows XSS.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.

CVE-2026-44923

SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.

历史摘要 · 未重新核验 · NVD

学术论文2026-05-20 发布INFO

An IoT-Enabled Smart Home Automation System for Energy Efficiency with Web-Based Control

本文介绍了一种基于物联网的智能家居自动化系统,旨在通过环境传感器和树莓派5实现节能与用户控制。系统实时监测运动、温度、湿度、光照和烟雾等环境参数,自动调节设备行为以节省能源。原型系统覆盖单间两室,利用GPIO/I2C接口集成传感器和执行器,

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-05-19 发布INFO

The Privacy Subsidy in Glosten-Milgrom: Bid-Ask Spread and Welfare under Flip-Noise Direction Observation

本文研究了在Glosten-Milgrom(1986)顺序交易模型中,当做市商观察到由二元翻转信道(概率η)扰动的交易方向信号时,均衡买卖价差和福利分解的闭式解。该信道是方向信号上隐私机制的自然信息论模型。在承诺贝叶斯做市商定价规则下,均衡

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-05-22 发布INFO

决赛直播|第四届阿里CTF安全挑战赛

本文是第四届阿里CTF安全挑战赛决赛直播的新闻稿,由先知社区发布。内容主要介绍比赛背景、赛制、直播时间等信息,不涉及任何真实的网络攻击威胁、漏洞利用或恶意软件。该赛事由阿里巴巴安全部主办,旨在提升安全爱好者的实战能力,属于社区技术交流活动。

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-05-22 发布INFO

抢先加入AI时代顶尖安全团队!阿里云2027届实习生招聘来了!

本文为阿里云2027届实习生招聘信息,不涉及任何安全威胁或漏洞信息。请忽略此条。

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-05-22 发布INFO

网络安全信息与动态周报-2026年第14期

本报告为CNCERT发布的2026年第14期网络安全信息与动态周报,内容涵盖本周内国内外网络安全事件、漏洞信息、威胁动态及安全建议。由于原文未提供具体摘要,无法获取详细攻击活动、战术或受害者信息。建议读者查阅原文获取完整内容。

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-05-22 发布INFO

Control CenterAccess the Akamai platform

Control CenterAccess the Akamai platform

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-22 发布INFO

Akamai Security

Akamai Security

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-22 发布INFO

Our global infrastructure

Our global infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-22 发布INFO

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT