2026-06-09 归档

今日共收录 1126 条安全情报，包含 321 个 CVE，413 篇安全通告，以及 105 篇研究论文。

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluator create and update mass-assignment allows cross-workspa...

CVE-2026-46480

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluat

历史摘要 · 未重新核验 · NVD

#cve #cwe-915

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluation create and update mass-assignment allows cross-worksp...

CVE-2026-46479

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluat

历史摘要 · 未重新核验 · NVD

#cve #cwe-915

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, DatasetRow create and update mass-assignment allows cross-worksp...

CVE-2026-46478

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, Dataset

历史摘要 · 未重新核验 · NVD

#cve #cwe-915

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, dataset create and update mass-assignment allows cross-workspace...

CVE-2026-46477

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, dataset

历史摘要 · 未重新核验 · NVD

#cve #cwe-915

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomTemplate create and update mass-assignment allows cross-wo...

CVE-2026-46476

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomT

历史摘要 · 未重新核验 · NVD

#cve #cwe-915

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, assistant create and update mass-assignment allows cross-workspa...

CVE-2026-46475

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, assista

历史摘要 · 未重新核验 · NVD

#cve #cwe-915

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRUD endpoints for OpenAI Assistants Vector Store have no au...

CVE-2026-46444

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRU

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when credentials are fetched with a credentialName filter parame...

CVE-2026-46443

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorizatio...

CVE-2026-46442

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /a

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the assistant update e...

CVE-2026-46441

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-639 #cwe-915

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, the checkBasicAuth endpoint validates credentials in plaintext w...

CVE-2026-46440

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, the che

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-06-08 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to Use-Af...

CVE-2026-46275

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions i

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-06-08 发布INFO

In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io_wq_remove_pending() io_wq_remove_pending() needs to fix u...

CVE-2026-46274

In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io_w

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-06-08 发布INFO

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issu...

CVE-2026-44186

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server w

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-06-08 发布INFO

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through ...

CVE-2026-44185

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server T

历史摘要 · 未重新核验 · NVD

#cve #cwe-126

漏洞预警2026-06-08 发布INFO

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This is...

CVE-2026-44119

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to r

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-06-08 发布INFO

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through ...

CVE-2026-43951

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the chatflow update en...

CVE-2026-42863

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-639 #cwe-915

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the tool update endpoi...

CVE-2026-42862

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-639 #cwe-915

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the variable update en...

CVE-2026-42861

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-639 #cwe-915