2026-06-06 归档

今日共收录 1443 条安全情报,包含 665 个 CVE,387 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-06-04 发布INFO

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec...

CVE-2026-10972

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perfor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to p...

CVE-2026-10971

Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chrom...

CVE-2026-10966

Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securit...

CVE-2026-10931

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromiu...

CVE-2026-10892

Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securit...

CVE-2026-10886

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromiu...

CVE-2026-10881

Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration be...

CVE-2024-27892

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration be...

CVE-2024-27890

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to lo...

CVE-2025-71316

SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

CVE-2026-50292

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properti

历史摘要 · 未重新核验 · NVD

安全公告2026-06-06 发布INFO

The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More...

CVE-2026-8901

The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vuln

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to,...

CVE-2026-9008

The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2. Thi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template...

CVE-2026-9281

The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits plugin for WordPress

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable...

CVE-2026-6448

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

CVE-2026-8900

The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...

CVE-2026-7047

The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is...

CVE-2026-9719

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Req

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to...

CVE-2026-9290

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting...

CVE-2026-8893

The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribut

历史摘要 · 未重新核验 · GitHub Advisory