2026-06-20 归档

今日共收录 996 条安全情报，包含 203 个 CVE，413 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-06-19 发布INFO

Joomla! Component Ajax Quiz 1.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug...

CVE-2017-20262

Joomla! Component Ajax Quiz 1.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla! Component Bargain Product VM3 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c...

CVE-2017-20261

Joomla! Component Bargain Product VM3 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla! Component Price Alert 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code th...

CVE-2017-20260

Joomla! Component Price Alert 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to exe

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla OSDownloads 1.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the i...

CVE-2017-20259

Joomla OSDownloads 1.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitr

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla! Component RPC Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting mali...

CVE-2017-20258

Joomla! Component RPC Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows unauthenticated att

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_q...

CVE-2017-20257

Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to exe

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throu...

CVE-2017-20256

Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execut

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla! Component JB Visa 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through ...

CVE-2017-20255

Joomla! Component JB Visa 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute a

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla! Component User Bench 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throu...

CVE-2017-20254

Joomla! Component User Bench 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execut

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla! Component My Projects 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code thro...

CVE-2017-20253

Joomla! Component My Projects 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

Joomla NextGen Editor 2.1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the plname parameter. Attacke...

CVE-2017-20252

Joomla NextGen Editor 2.1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arb

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. [0]...

CVE-2026-52910

In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace perio

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-06-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device. john1988 and Noam Rathaus reported that vti6_init_net(...

CVE-2026-52909

In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-06-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure that REREG_ACCESS is compatible If IB_MR_REREG_ACCESS changes from RO to RW th...

CVE-2026-52908

In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure that REREG_ACCESS is c

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-06-19 发布INFO

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `AbstractGenerator::$temporaryFiles` is a public array, and `removeTem...

CVE-2026-49358

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `AbstractGene

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-06-19 发布INFO

The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious co...

CVE-2026-21768

The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to prope

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-79

漏洞预警2026-06-19 发布INFO

AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevated SYSTEM privi...

CVE-2025-71326

AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-428

漏洞预警2026-06-19 发布INFO

Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attackers to execute arbitrary code by placing malicious execut...

CVE-2023-54353

Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-428

漏洞预警2026-06-19 发布INFO

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code int...

CVE-2022-50971

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-428

漏洞预警2026-06-19 发布INFO

Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a ...

CVE-2021-47985

Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local

历史摘要 · 未重新核验 · NVD

#cve #cwe-428