2026-06-12 归档

今日共收录 1106 条安全情报，包含 305 个 CVE，402 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-06-10 发布INFO

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based bu...

CVE-2026-11604

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-131 #cwe-787

漏洞预警2026-06-10 发布INFO

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a roo...

CVE-2026-0273

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-10 发布INFO

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform acti...

CVE-2026-0272

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with a

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-10 发布INFO

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. Th...

CVE-2026-0271

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a l

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-06-10 发布INFO

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability t...

CVE-2026-0270

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-10 发布INFO

A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a mali...

CVE-2026-0269

A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an a

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

漏洞预警2026-06-10 发布INFO

A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does not impact Prisma ...

CVE-2026-0268

A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffi

历史摘要 · 未重新核验 · NVD

#cve #cwe-424

漏洞预警2026-06-10 发布INFO

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, o...

CVE-2026-0267

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-10 发布INFO

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web int...

CVE-2026-0266

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated admi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

威胁情报2026-06-11 发布INFO

Naxclow IoT Platform

CVE-2026-50108 · CVE-2026-42947 · CVE-2026-50101

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, inter

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#government #apt #cisa #advisory

威胁情报2026-06-11 发布INFO

Oracle mitigates PeopleSoft zero-day exploited in data theft attacks

CVE-2026-35273

Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthe

历史摘要 · 未重新核验 · BleepingComputer

#news #ransomware #cybersecurity

威胁情报2026-06-10 发布INFO

Path traversal flaw in AI dev platform Langflow exploited in attacks

CVE-2026-5027

Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development plat

历史摘要 · 未重新核验 · BleepingComputer

#news #ransomware #cybersecurity

安全公告2026-06-12 发布INFO

Compatibility Test Suite (CTS)

Android 兼容性测试套件 (CTS) 是用于确保 Android 设备兼容性的一组测试工具，由 Android 安全公告发布。该套件旨在帮助设备制造商验证其实现是否符合 Android 兼容性定义文档 (CDD) 的要求。输入内容为指