2026-06-06 归档

今日共收录 1443 条安全情报,包含 665 个 CVE,387 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-06-04 发布INFO

Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic...

CVE-2026-10888

Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segmen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security...

CVE-2026-10887

Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s...

CVE-2026-10885

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arb

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape v...

CVE-2026-10884

Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security seve...

CVE-2026-10883

Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Criti...

CVE-2026-10882

Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code vi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipu...

CVE-2026-10875

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unk

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulati...

CVE-2026-10874

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lea...

CVE-2026-10873

A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all IPsec traffic. The control plane may de...

CVE-2025-8873

On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to st

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports...

CVE-2024-27891

On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious suppli...

CVE-2023-5502

On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing en

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for custo...

CVE-2026-42547

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In ve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 are vulnerable to a cross-site reques...

CVE-2026-42543

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the d...

CVE-2026-42540

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user whi...

CVE-2026-42539

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace boundary by supplying symlinks that resolve to files or dir...

CVE-2026-11322

Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace bo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulati...

CVE-2026-10871

A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.

CVE-2024-6858

In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c). When the TLS session cache is...

CVE-2026-5066

A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/

历史摘要 · 未重新核验 · NVD