2026-05-27 归档

今日共收录 1142 条安全情报,包含 375 个 CVE,381 篇安全通告,以及 103 篇研究论文。

← 返回归档列表
安全公告2026-05-27 发布INFO

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for...

CVE-2026-7493

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to den

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Tanium addressed an unauthorized code execution vulnerability in Connect.

CVE-2026-9207

Tanium addressed an unauthorized code execution vulnerability in Connect.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

@hapi/wreck leaks sensitive `Proxy-Authorization` header across cross-hostname redirects

CVE-2026-44979

### Impact When `@hapi/wreck` follows a 3xx redirect to a different hostname, only the `Authorization` and `Cookie` head

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

@hapi/content header parser has a parameter smuggling issue that allows upload-filter bypass via duplicate parameters

CVE-2026-44974

### Impact The two parsers resolved duplicates inconsistently and silently: - `Content.disposition()` retained the last

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter

CVE-2026-44741

# GM-369 ## Summary SQL injection in Pimcore's translation grid date filter — the user-supplied `property` field from t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape

CVE-2026-44705

### Summary The tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary dir

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is...

CVE-2026-9607

A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0....

CVE-2026-9603

A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-8680

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...

CVE-2026-9312

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric...

CVE-2026-46740

Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric names and set values w

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function...

CVE-2026-9605

A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...

CVE-2026-8606

A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of...

CVE-2026-9604

A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of the component AiragMod

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an...

CVE-2026-9606

A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the fil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A security vulnerability has been detected in code-projects Project Management System 1.0....

CVE-2026-9584

A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown functi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a...

CVE-2026-42012

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certifi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check....

CVE-2026-42015

A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An...

CVE-2025-46307

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to acc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ...

CVE-2026-42013

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the va

历史摘要 · 未重新核验 · GitHub Advisory