2026-06-03 归档

今日共收录 1204 条安全情报,包含 428 个 CVE,390 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-06-03 发布INFO

京公网安备 11000002002063号

输入内容为公安备案信息,标题'京公网安备 11000002002063号',来源360CERT,但实际内容仅为备案号链接,无任何漏洞或安全公告信息。无法进行漏洞分析。

历史摘要 · 未重新核验 · 360CERT

安全公告2026-06-03 发布INFO

(总)网出证(京)字第281号

该信息为360CERT的资质证书(网出证(京)字第281号),发布于360官网(licence2.html),内容为网络安全服务机构的相关认证证明,不涉及任何安全漏洞或技术风险。

历史摘要 · 未重新核验 · 360CERT

安全公告2026-06-03 发布INFO

京网文〔2020〕6051-1195号

输入内容不是有效的安全公告,无法生成摘要。标题“京网文〔2020〕6051-1195号”为版权/ICP备案号,来源链接为360.cn许可页面,无漏洞技术细节、影响范围或修复建议。

历史摘要 · 未重新核验 · 360CERT

安全公告2026-06-03 发布INFO

京ICP证080047号[京ICP备08010314号-6]

该输入为ICP备案信息(京ICP证080047号[京ICP备08010314号-6]),来源360CERT,发布时间为2026年6月3日。内容不涉及任何网络安全漏洞或威胁情报,仅为网站备案许可公示。无漏洞描述、无CVE、无受影响产品信息。

历史摘要 · 未重新核验 · 360CERT

漏洞预警2026-06-02 发布INFO

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves $...

CVE-2026-32625

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the M

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by sending an empty POST. This issue has bee...

CVE-2026-49448

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Simple Flow Executor) in order to make t...

CVE-2026-42849

authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of st

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy o...

CVE-2026-5076

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoti...

CVE-2026-0611

Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on ...

CVE-2026-47117

OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

SIP signaling stack in Verizon IMS (unspecified version) implements SIP signaling without IPsec integrity protection (missing Security-Client/Security-Server headers and ESP tra...

CVE-2026-10629

SIP signaling stack in Verizon IMS (unspecified version) implements SIP signaling without IPsec integrity protection (mi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335,...

CVE-2026-7312

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be rest...

CVE-2026-7198

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unaut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects WP Job ...

CVE-2026-42684

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Porta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation. This issue affects Masteriyo LMS PRO: from n/a through 2.20.0.

CVE-2025-53209

Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation. This issue aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. T...

CVE-2026-8206

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent executes SQL produced by an LLM, which is influenceable by ...

CVE-2026-25879

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) private keys are ina...

CVE-2026-40965

Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or doma...

CVE-2018-25427

Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.

CVE-2026-9319

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of

历史摘要 · 未重新核验 · NVD