An authorization flaw in MISP’s object add/edit handling allowed an authenticated user with...
CVE-2026-54398
An authorization flaw in MISP’s object add/edit handling allowed an authenticated user with object editing permissions t
2026-06-13 归档
今日共收录 1165 条安全情报，包含 370 个 CVE，402 篇安全通告，以及 115 篇研究论文。
← 返回归档列表OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command...
CVE-2026-53828
OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authentic
OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming...
CVE-2026-53833
OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming command that allows auth
OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing...
CVE-2026-53830
OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and
OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin...
CVE-2026-53831
OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that a
OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded...
CVE-2026-53836
OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows
OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing...
CVE-2026-53829
OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide com
OpenClaw before 2026.4.27 contains an authorization bypass vulnerability in QQBot pre-dispatch...
CVE-2026-53834
OpenClaw before 2026.4.27 contains an authorization bypass vulnerability in QQBot pre-dispatch slash commands that allow
Software installed and run as a non-privileged user may conduct GPU system calls to write to...
CVE-2026-41158
Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pa
Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API...
CVE-2026-34195
Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of
OpenClaw before 2026.5.3 contains a privilege escalation vulnerability in the allowFrom feature...
CVE-2026-53823
OpenClaw before 2026.5.3 contains a privilege escalation vulnerability in the allowFrom feature that binds to mutable Sl
OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP...
CVE-2026-53820
OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path t
A weakness has been identified in CodeAstro Human Resource Management System 1.0. This...
CVE-2026-12131
A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vulnerability affects the functio
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed...
CVE-2025-7017
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may al
OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv...
CVE-2026-53822
OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between appro
OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked...
CVE-2026-53824
OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to contin
Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed...
CVE-2025-7018
Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Den
Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file...
CVE-2025-7019
Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Servi
OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session...
CVE-2026-53826
OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes th
An attacker could cooperatively pass data from one secure GPU process to another secure GPU...
CVE-2026-41155
An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secur