APSB26-60: Security update available for Adobe Substance 3D Sampler
APSB26-60: Security update available for Adobe Substance 3D Sampler
2026-06-12 归档
今日共收录 1106 条安全情报，包含 305 个 CVE，402 篇安全通告，以及 120 篇研究论文。
← 返回归档列表APSB26-61: Security update available for Content Credentials SDK
APSB26-61: Security update available for Content Credentials SDK
APSB26-62: Security update available for Adobe Dreamweaver
APSB26-62: Security update available for Adobe Dreamweaver
APSB26-63: Security update available for Adobe Acrobat Reader
APSB26-63: Security update available for Adobe Acrobat Reader
APSB26-64: Security update available for Adobe ColdFusion
APSB26-64: Security update available for Adobe ColdFusion
APSB26-65: Security update available for Adobe Format Plugins
APSB26-65: Security update available for Adobe Format Plugins
APSB26-66: Security update available for Adobe Campaign Classic
APSB26-66: Security update available for Adobe Campaign Classic
【腾讯云数据库 AI 服务】关于 DatabaseClaw 正式商业化计费的公告
【腾讯云数据库 AI 服务】关于 DatabaseClaw 正式商业化计费的公告
【数学试题识别3.0】API 接口迁移通知
【数学试题识别3.0】API 接口迁移通知
【数学公式识别3.0】API 接口迁移通知
【数学公式识别3.0】API 接口迁移通知
Extended Stable Updates for Desktop
The Extended Stable channel has been updated to 148.0.7778.265 for Windows and Mac which will roll out over the coming d
Critical Security Patch Update - June 2026 - Pre-Release Announcement
Critical Security Patch Update - June 2026 - Pre-Release Announcement
Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Under specific circumstances and...
CVE-2026-45169
Idira Privileged Access Manager (PAM) Self-Hosted Vault 版本 15.0.3 之前、14.6.5 之前、14.2.7 之前以及 14.0.8 之前存在一个验证漏洞。在特定的配置场景下，处
Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, the default configuration of the `Http3ConnectionHandler...
CVE-2026-44892
Netty 是一个用于开发协议服务器和客户端的网络应用框架。在版本 4.2.15.Final 之前，Netty HTTP/3 编解码器中的 `Http3ConnectionHandler` 默认配置缺少强制性的最大标头大小限制。当对等方未明
SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL q...
CVE-2026-48613
CVE-2026-48613 是 phpBB 论坛软件中存在的 SQL 注入漏洞，存在于用户资料字段 (profile field) 的迁移过程中。当论坛从早于 3.3.8 的版本升级到 3.3.8 或更高版本但未升级到 3.3.11 时，
Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’s account to be linked to an attacker-co...
CVE-2026-48612
该漏洞（CVE-2026-48612）存在于OAuth实现中，由于状态验证不当，攻击者可操纵认证流程，将受害者的账户关联到攻击者控制的账户上。这可能导致未经授权的账户关联，进而造成账户接管。攻击复杂度较高（需网络访问、用户交互），但影响严重
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS t...
CVE-2026-48610
CVE-2026-48610 是影响 UniFi OS 设备的一个不当访问控制漏洞。在特定网络配置下，具有网络访问权限的未经认证的攻击者能够利用该漏洞对目标设备进行未授权更改，可能包括修改配置、获取敏感信息或执行其他管理操作。该漏洞的 CV
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or ...
CVE-2026-47368
CVE-2026-47368 是一个影响运行 UniFi OS 的特定设备的路径遍历漏洞。该漏洞允许拥有网络访问权限的恶意攻击者利用路径遍历技术，从目标 Unifi OS 设备或实例中获取数据。根据 CVSS 3.1 评分，该漏洞的基础得分
Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to grant permissions...
CVE-2026-47366
CVE-2026-47366 是一个存在于管理控制面板（ACP）中的权限验证不当漏洞。在通过 ACP 修改权限时，系统未能正确验证管理员的操作权限，导致已认证的管理员可以为其账户授予超出自身授权级别的权限，从而在管理界面内实现权限提升。该漏
Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and ...
CVE-2026-20746
Ping Identity PingDirectory 中存在一个与虚拟属性处理相关的安全漏洞。当启用最近登录历史功能并复制引用了 ds-privilege-name 值的虚拟属性时，经过授权的用户可以利用该漏洞耗尽 Java 内存堆，导致