An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (...

CVE-2026-25624

An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista E

历史摘要 · 未重新核验 · NVD

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenti...

CVE-2026-25623

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Mana

历史摘要 · 未重新核验 · NVD

A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an admin...

CVE-2026-25622

A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Ge

历史摘要 · 未重新核验 · NVD

A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue ...

CVE-2026-25621

A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Fire

历史摘要 · 未重新核验 · NVD

An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW...

CVE-2026-25620

An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge

历史摘要 · 未重新核验 · NVD

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously sending a special...

CVE-2026-25659

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulne

历史摘要 · 未重新核验 · NVD

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously sending a special...

CVE-2026-25658

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulne

历史摘要 · 未重新核验 · NVD

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacker continuously ...

CVE-2026-25657

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structur

历史摘要 · 未重新核验 · NVD

A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By craf...

CVE-2026-11346

A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticat

历史摘要 · 未重新核验 · NVD

Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.

CVE-2026-48579

Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a netwo

历史摘要 · 未重新核验 · NVD

Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose i...

CVE-2026-47644

Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Micr

历史摘要 · 未重新核验 · NVD

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, local attacker to execute arbitrary commands as root by suppl...

CVE-2026-20245

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, loca

历史摘要 · 未重新核验 · NVD

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation res...

CVE-2026-10872

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/

历史摘要 · 未重新核验 · NVD

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp implementation of draft-ietf-ohai-chunked-ohttp does not ve...

CVE-2026-48480

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp im

历史摘要 · 未重新核验 · NVD

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

CVE-2026-20929

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

历史摘要 · 未重新核验 · CrowdStrike

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257

CVE-2026-0257

We include indicators of activity and mitigations for PAN-OS vulnerability CVE-2026-0257. The post Threat Brief: Active

历史摘要 · 未重新核验 · Palo Alto Unit 42

Cisco warns of unpatched SD-WAN zero-day exploited in attacks

CVE-2026-20245

On Thursday, Cisco warned of a high-severity, unpatched zero-day in the Cisco Catalyst SD-WAN Manager (tracked as CVE-20

历史摘要 · 未重新核验 · BleepingComputer

Compatibility Test Suite (CTS)

Android 兼容性测试套件（CTS）是 Google 提供的一套测试工具，用于验证 Android 设备是否符合 Android 兼容性定义文档（CDD）的要求。设备制造商必须通过 CTS 测试，才能确保其设备能够正常运行 Androi

历史摘要 · 未重新核验 · Android Security Bulletin

Compatibility Definition Document (CDD)

Android兼容性定义文档（CDD）是Android生态系统的核心规范，定义了设备必须满足的硬件和软件要求，以确保应用兼容性和一致的用户体验。该文档由Google维护，涵盖屏幕尺寸、内存、存储、传感器、安全模型、权限管理等各个方面。本次发

历史摘要 · 未重新核验 · Android Security Bulletin

Tools, build, and related reference

该公告是 Android 安全公告中的一篇参考文档，标题为“Tools, build, and related reference”，内容涉及 Android 构建工具和开发参考。公告中未包含任何具体漏洞信息、CVE 标识或受影响的产品版本

历史摘要 · 未重新核验 · Android Security Bulletin