2026-07-02 归档

今日共收录 1714 条安全情报，包含 914 个 CVE，384 篇安全通告，以及 113 篇研究论文。

← 返回归档列表

漏洞预警2026-07-01 发布INFO

NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound middleware verifies the HTTP-signature actor and checks t...

CVE-2026-58593

NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound

历史摘要 · 未重新核验 · NVD

#cve #cwe-290 #cwe-345

漏洞预警2026-07-01 发布INFO

Ladybird contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. When a JavaScript function is imported into a WebAssembly module via ...

CVE-2026-58592

Ladybird contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. When a JavaS

历史摘要 · 未重新核验 · NVD

#cve #cwe-787 #cwe-825 #cwe-843

漏洞预警2026-07-01 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In versions from 2.0.0 prior to 2.16.0 and ...

CVE-2026-55688

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

#cve #cwe-1275

漏洞预警2026-07-01 发布INFO

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. In versions prior to 4.1.30, 4.2.26 and 4.3.12, the serializer's AbstractItemNormalizer does not...

CVE-2026-54164

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. In versions prior to 4.1.30, 4.2.26 and

历史摘要 · 未重新核验 · NVD

#cve #cwe-843

漏洞预警2026-07-01 发布INFO

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. In versions from 2.6.0 prior to 4.1.29, 4.2.26, and 4.3.12, a missing isCacheKeySafe gate in the...

CVE-2026-49858

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. In versions from 2.6.0 prior to 4.1.29,

历史摘要 · 未重新核验 · NVD

#cve #cwe-524 #cwe-639

漏洞预警2026-07-01 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. ...

CVE-2026-14363

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-01 发布INFO

Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to th...

CVE-2026-14265

Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 t

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-07-01 发布INFO

Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawi...

CVE-2026-58517

Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-07-01 发布INFO

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embed...

CVE-2026-58451

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-01 发布INFO

In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security pol...

CVE-2026-55628

In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both re

历史摘要 · 未重新核验 · NVD

#cve #cwe-73 #cwe-862

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buf...

CVE-2026-55597

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26

历史摘要 · 未重新核验 · NVD

#cve #cwe-682 #cwe-787

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the ...

CVE-2026-55595

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-835

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder...

CVE-2026-55594

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-674

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG...

CVE-2026-55577

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-754 #cwe-755 #cwe-787

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted...

CVE-2026-55510

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-07-01 发布INFO

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotation...

CVE-2026-53492

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation impr

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-863

漏洞预警2026-07-01 发布INFO

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image withou...

CVE-2026-53489

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plu

历史摘要 · 未重新核验 · NVD

#cve #cwe-61

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap...

CVE-2026-53467

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-908

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder c...

CVE-2026-53466

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-681

漏洞预警2026-07-01 发布INFO

An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and Patch_CWE502_20260316.zip) allows a remote attacker to...

CVE-2026-51947

An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 a

历史摘要 · 未重新核验 · NVD

#cve