2026-06-13 归档

今日共收录 1165 条安全情报,包含 370 个 CVE,402 篇安全通告,以及 115 篇研究论文。

← 返回归档列表
漏洞预警2026-06-12 发布INFO

Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process. This iss...

CVE-2025-7018

Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Den

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the a...

CVE-2025-7017

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-Service of the antiviru...

CVE-2025-7011

Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Loc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may allow Denial-of-Service of the antivirus process. This issu...

CVE-2025-7010

Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus...

CVE-2025-7009

Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata may allow Local Execution of Code or Denial-of-Servi...

CVE-2025-7008

Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET meta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affec...

CVE-2025-7006

Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Deni

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affects Avast...

CVE-2025-7005

Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antiviru...

CVE-2025-7004

Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Loc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus...

CVE-2025-7003

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus...

CVE-2025-7002

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Rejected reason: This candidate was issued in error.

CVE-2020-2521

Rejected reason: This candidate was issued in error.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manipulate the submitted form data and set an event’s sharing_...

CVE-2026-54397

A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manip

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs during an AuthKey edit request, the user dropdown was popul...

CVE-2026-54396

An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs du

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The urlparams value is inserted into an inline JavaScript handler using HTML escapin...

CVE-2026-54395

MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The urlparams value is inse

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisation logo file paths using organisation-controlled fields...

CVE-2026-54394

MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint previously saved the user-controlled path value through setS...

CVE-2026-54393

A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint pre

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view galaxies that should not have been visible to their organ...

CVE-2026-54362

An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 (color-control) query reply reflects attacker-controlled bytes, including newlines, int...

CVE-2026-54057

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 (color-control) query reply re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Kitty is a cross-platform GPU based terminal. In versions 0.47.0 and 0.47.1, `kitten dnd` can allow a malicious remote drag-and-drop source to overwrite or truncate arbitrary fi...

CVE-2026-54056

Kitty is a cross-platform GPU based terminal. In versions 0.47.0 and 0.47.1, `kitten dnd` can allow a malicious remote d

历史摘要 · 未重新核验 · NVD