2026-05-28 归档

今日共收录 1581 条安全情报,包含 810 个 CVE,383 篇安全通告,以及 109 篇研究论文。

← 返回归档列表
学术论文2026-05-26 发布INFO

Privacy-Preserving Screening for Record Linkage

Privacy-Preserving Screening for Record Linkage

历史摘要 · 未重新核验 · arXiv cs.CR

漏洞预警2026-05-27 发布INFO

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO accepts client-supplied session_id values in Web...

CVE-2026-46544

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO's constellation client tracks pending task respo...

CVE-2026-46538

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO creates one shared UFOWebSocketHandler instance ...

CVE-2026-46416

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO's WebSocket control plane trusts client-supplied...

CVE-2026-46414

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO uses the user-controlled task_name value directl...

CVE-2026-46402

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injec...

CVE-2026-45322

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releas

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Tanium addressed an unauthorized code execution vulnerability in Connect.

CVE-2026-9208

Tanium addressed an unauthorized code execution vulnerability in Connect.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command injection vulnerability exists in uniget due to unsafe execution of the check field...

CVE-2026-45152

uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command injection vulnerability ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could all...

CVE-2026-44720

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request...

CVE-2026-44247

Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook serv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM module loaded into the host process (sudo, login, GDM, GNOME ...

CVE-2026-47270

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM modu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remote feature checks utmpx ut_addr_v6 to detect whether an au...

CVE-2026-47269

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remot

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0.2, an logic error causes anchor programs to accept any p...

CVE-2026-45137

Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh (introduced in v3.5.0) interpolates Claude Code's hook...

CVE-2026-45136

claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/tmux.c reads the user's $TMUX environment variable, splits it on commas, a...

CVE-2026-44713

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/tmux.c reads the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such as $(id>/tmp/rce) in the config causes root RCE when pamus...

CVE-2026-44712

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass an...

CVE-2026-44711

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed the return values of udisks_drive_get_serial(), udisks_dri...

CVE-2026-44710

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, pamusb-pinentry reads the PINENTRY_FALLBACK_APP environment variable and execu...

CVE-2026-44709

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, pamusb-pinentry reads

历史摘要 · 未重新核验 · NVD