Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command. ...

CVE-2026-35087

Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter

历史摘要 · 未重新核验 · NVD

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including,...

CVE-2026-3349

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter o

历史摘要 · 未重新核验 · NVD

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings (Description, Title, and other fields) in all versions up t...

CVE-2026-3348

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings (D

历史摘要 · 未重新核验 · NVD

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials fr...

CVE-2025-14713

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0

历史摘要 · 未重新核验 · NVD

Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affect...

CVE-2025-13392

Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7

历史摘要 · 未重新核验 · NVD

The Login with NEAR plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.3.3. The `ajaxLoginWithNear()` function — registered as a...

CVE-2026-8994

The Login with NEAR plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.

历史摘要 · 未重新核验 · NVD

The Two-factor authentication (formerly IP Vault) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to miss...

CVE-2026-8903

The Two-factor authentication (formerly IP Vault) plugin for WordPress is vulnerable to Cross-Site Request Forgery in al

历史摘要 · 未重新核验 · NVD

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 toke...

CVE-2026-5260

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key excha

历史摘要 · 未重新核验 · NVD

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor...

CVE-2026-45574

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on t

历史摘要 · 未重新核验 · NVD

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC...

CVE-2026-9560

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute

历史摘要 · 未重新核验 · NVD

FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/f...

CVE-2026-48695

FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integra

历史摘要 · 未重新核验 · NVD

FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin. In src/juniper_plugin/fastnetmon_juniper.ph...

CVE-2026-48694

FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integr

历史摘要 · 未重新核验 · NVD

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by addin...

CVE-2026-44730

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an

历史摘要 · 未重新核验 · NVD

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

CVE-2026-20929

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

历史摘要 · 未重新核验 · CrowdStrike

Compatibility Test Suite (CTS)

此公告为 Android 兼容性测试套件 (CTS) 的更新说明，并非安全漏洞公告。CTS 用于确保 Android 设备符合兼容性标准，不涉及已知安全漏洞。

历史摘要 · 未重新核验 · Android Security Bulletin

Compatibility Definition Document (CDD)

Android 兼容性定义文档（Compatibility Definition Document, CDD）是 Android 生态系统的核心规范，定义了设备制造商必须满足的硬件和软件要求，以确保应用兼容性。此公告由 Android 安全

历史摘要 · 未重新核验 · Android Security Bulletin

Tools, build, and related reference

该文档是 Android 安全公告中关于工具、构建及相关参考的内容，并非具体的漏洞安全公告。文档主要面向 Android 平台开发者和构建系统维护者，提供了构建工具链、编译环境配置、构建流程等参考信息。由于没有包含任何 CVE 或漏洞细节，

历史摘要 · 未重新核验 · Android Security Bulletin

Latest Compatibility Definition Document (CDD)

该公告为Android兼容性定义文档（CDD）的最新版本发布。CDD是Android生态系统中的关键文档，用于定义设备必须满足的硬件、软件和API兼容性要求，以确保应用在不同设备上的一致运行。本次更新可能涉及对最新Android版本的新要求

历史摘要 · 未重新核验 · Android Security Bulletin

Latest security bulletins

Android安全公告是谷歌每月发布的官方安全更新汇总，旨在修复Android平台中存在的各类安全漏洞。本次公告发布于2026年5月28日，涵盖了多个组件（如系统框架、媒体框架、内核等）的安全补丁。虽然公告中未列出具体CVE编号，但通常包含

历史摘要 · 未重新核验 · Android Security Bulletin

update the software on your Mac

Apple 发布了针对 Mac 系统的安全更新公告（2026-05-28），建议用户立即更新软件以修复可能存在的安全漏洞。虽然公告未提供具体漏洞细节或 CVE 编号，但此类更新通常涉及修复内核、浏览器、系统组件等关键部分的安全问题。攻击者可

历史摘要 · 未重新核验 · Apple Security Releases