2026-06-13 归档

今日共收录 1165 条安全情报，包含 370 个 CVE，402 篇安全通告，以及 115 篇研究论文。

漏洞预警2026-06-12 发布INFO

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM supports excluding public network builtins from the wildcard builtin option. With this configuratio...

CVE-2026-47139

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM supports excluding public network builtins

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-06-12 发布INFO

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. Comb...

CVE-2026-47135

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only inte

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each n...

CVE-2026-46340

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to va...

CVE-2026-45674

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Fina

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver uses a predictab...

CVE-2026-45673

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Fina

历史摘要 · 未重新核验 · NVD

#cve #cwe-330 #cwe-340

漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, netty_unix_socket_recvFd sets msg_con...

CVE-2026-45536

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Fina

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-772

漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads ...

CVE-2026-45416

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Fina

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used when the application does not set one. Prio...

CVE-2026-44894

Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the toke

历史摘要 · 未重新核验 · NVD

#cve #cwe-940

漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final, when decoding ...

CVE-2026-44893

Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior t

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-06-12 发布INFO

Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user profile image section allows an attacker to execute malicious...

CVE-2026-44205

Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user prof

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-06-12 发布INFO

Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, there is a possible SQL Injection via get_blog_list. This issue has been patched in ver...

CVE-2026-41581

Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, there is a possible SQL Inject

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-12 发布INFO

Rejected reason: Reserved but no longer needed.

CVE-2026-54102

Rejected reason: Reserved but no longer needed.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-06-12 发布INFO

Rejected reason: Reserved but no longer needed.

CVE-2026-54101

Rejected reason: Reserved but no longer needed.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-06-12 发布INFO

Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder from versions 3.15.4 to before 3.21.7 and 4.0.0 to before 4.4.7, t...

CVE-2026-49993

Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder from vers

历史摘要 · 未重新核验 · NVD

#cve #cwe-749

漏洞预警2026-06-12 发布INFO

Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.1.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to ...

CVE-2026-46342

Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.1.0 to before 3.21.6 and 4.0.0-alpha.1 t

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-349 #cwe-444

漏洞预警2026-06-12 发布INFO

Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder versions 3.15.4 to before 3.21.6, and 4.0.0-alpha.1 to before 4.4....

CVE-2026-45670

Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder versions

历史摘要 · 未重新核验 · NVD

#cve #cwe-749

漏洞预警2026-06-12 发布INFO

Nuxt is an open-source web development framework for Vue.js. From versions 3.4.3 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6, navigateTo() with external: true generates a...

CVE-2026-45669

Nuxt is an open-source web development framework for Vue.js. From versions 3.4.3 to before 3.21.6 and 4.0.0-alpha.1 to b

历史摘要 · 未重新核验 · NVD

#cve #cwe-83

漏洞预警2026-06-12 发布INFO

The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser a...

CVE-2026-1836

The system stores the username and password from the login form after submitting the request. This could allow an attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-257

漏洞预警2026-06-12 发布INFO

A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the compo...

CVE-2026-12066

A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-640

漏洞预警2026-06-12 发布INFO

A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown part of the component WebView URL Handler. The manipulati...

CVE-2026-12065

A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-939