2026-05-30 归档

今日共收录 1277 条安全情报，包含 517 个 CVE，386 篇安全通告，以及 105 篇研究论文。

← 返回归档列表

漏洞预警2026-05-28 发布INFO

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, LinkAce contains an Insecure Direct Object Reference vulnerability in the authorization policy layer t...

CVE-2026-45342

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, LinkAce contains an Insecure Direct Object Re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute e...

CVE-2026-45023

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

历史摘要 · 未重新核验 · NVD

#cve #cwe-770 #cwe-841

漏洞预警2026-05-28 发布INFO

Billy is an interface filesystem abstraction for Go. Prior to 5.9.0, multiple path traversal issues exist across different components of go-billy. Insufficient path sanitization...

CVE-2026-44973

Billy is an interface filesystem abstraction for Go. Prior to 5.9.0, multiple path traversal issues exist across differe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44885

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44884

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44883

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44882

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44881

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-200

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44850

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44849

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44848

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Usagi-org ai-goofish-monitor contains an unauthenticated arbitrary file read vulnerability in the GET /api/prompts/{filename} endpoint on Windows deployments that allows unauthe...

CVE-2026-10044

Usagi-org ai-goofish-monitor contains an unauthenticated arbitrary file read vulnerability in the GET /api/prompts/{file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user with Fleet management privileges c...

CVE-2026-49095

Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can subm...

CVE-2026-49094

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causi...

CVE-2026-49093

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated at...

CVE-2026-46843

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. E

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated at...

CVE-2026-46842

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. E

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated...

CVE-2026-46841

Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.1.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.9-12.2.15. Easily exploit...

CVE-2026-46837

Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported vers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthent...

CVE-2026-46835

Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-2

历史摘要 · 未重新核验 · NVD