2026-06-30 归档

今日共收录 1015 条安全情报,包含 254 个 CVE,381 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
漏洞预警2026-06-29 发布INFO

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent local debug logs. An attacker...

CVE-2026-13750

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundli...

CVE-2026-13749

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted to Snowflake services. An at...

CVE-2026-13748

Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file conten

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this issue by supplying crafted va...

CVE-2026-13746

Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project...

CVE-2026-13744

Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability. An attacker could potentially exploit...

CVE-2026-13742

Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verifica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. ...

CVE-2026-13587

A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. Such ma...

CVE-2026-13583

A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of the file /goform/for

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This ma...

CVE-2026-13582

A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/form

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request...

CVE-2026-13581

A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function formQoS of the file /goform/formQoS of the component POST Request Handler. The ma...

CVE-2026-13580

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function formQoS of the file /gof

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to ...

CVE-2026-13437

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-57525

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-57523

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.9.0 versions.

CVE-2026-57341

Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions.

CVE-2026-57340

Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.

CVE-2026-57339

Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

CVE-2026-57338

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions.

CVE-2026-57337

Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions.

CVE-2026-57336

Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions.

历史摘要 · 未重新核验 · NVD