2026-06-10 归档

今日共收录 1730 条安全情报,包含 831 个 CVE,478 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-06-09 发布INFO

A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function in pw.c copies an attacker-controlled algorithm ID into a 256-byte stack buffer withou...

CVE-2026-11793

A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function in pw.c copies an attacker-co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_string() function in auditlog.c copies a fixed-length passw...

CVE-2026-11792

A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_st

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes....

CVE-2026-11790

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter th...

CVE-2026-11789

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when comp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote a...

CVE-2026-11788

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in strin...

CVE-2026-11787

A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, ca...

CVE-2026-11786

A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack address information to be disclosed in LDAP responses...

CVE-2026-11785

A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial st

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_f...

CVE-2026-46324

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and GRO skb,...

CVE-2026-46323

In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive()

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one() When build_skb() fails in tun_xdp_one(), the function ...

CVE-2026-46322

In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one(

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_one() tun_xdp_one() returns -EINVAL on a frame shorter t...

CVE-2026-46321

In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp() tap_get_user_xdp() rejects a frame shorter than ETH_HLE...

CVE-2026-46320

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp()

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after ct_ft When looking up a flow table in act_ct in tcf_ct_...

CVE-2026-46319

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare" This reverts commit ea52cb24cd3f ("mm/hugetlbfs...

CVE-2026-46318

In the Linux kernel, the following vulnerability has been resolved: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_lock kvm->arch.nested_mmus[] is walked under kvm->mmu_loc...

CVE-2026-46317

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_ca...

CVE-2026-46316

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

When creating an export of all reusable media, the secrets of connected gift cards were included in the export even if the user creating the export does not have permission to...

CVE-2026-11764

When creating an export of all reusable media, the secrets of connected gift cards were included in the export even if

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers ca...

CVE-2017-20250

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the ...

CVE-2017-20249

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit

历史摘要 · 未重新核验 · NVD