2026-07-02 归档

今日共收录 1714 条安全情报，包含 914 个 CVE，384 篇安全通告，以及 113 篇研究论文。

← 返回归档列表

漏洞预警2026-07-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel wi...

CVE-2026-53332

In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after cr

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock During the SSR/PDR down notification the tx_lock i...

CVE-2026-53331

In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl-

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() [Why & How] The aux_rd_interval arra...

CVE-2026-53330

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_get_e

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_array() in dal_vector_reserve() [Why & How] dal_vector_reserve() computes the...

CVE-2026-53329

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_array() in dal_vector

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task() A WARN fires when systemd's user m...

CVE-2026-53328

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on NULL cgrp_moving_from in s

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fill_pool() if pi_blocked_on On RT enabled kernels, fill_pool() ends up calling rtlock...

CVE-2026-53327

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fill_pool() if pi_blocked_on

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't call fill_pool() in early boot hardirq context When booting a debug PREEMPT_RT kernel o...

CVE-2026-53326

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't call fill_pool() in early boot

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-01 发布INFO

The payment integration pretix-oppwa provides support for the payment providers VR Payment, Hobex, and potentially others based on Oppwa's technology. The integration of Oppwa...

CVE-2026-13603

The payment integration pretix-oppwa provides support for the payment providers VR Payment, Hobex, and potentially othe

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-918

漏洞预警2026-07-01 发布INFO

A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip` archives using the `ZipFile.extractall()` meth...

CVE-2026-8387

A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extract

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-07-01 发布INFO

A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access unauthorized data from another user.

CVE-2026-5120

A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to ac

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-07-01 发布INFO

MCO does not correctly validate types of uploaded files. File upload validation functionality relies only on client-side checks, which can be bypassed. An authorized, low-privil...

CVE-2026-53909

MCO does not correctly validate types of uploaded files. File upload validation functionality relies only on client-side

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-07-01 发布INFO

MCO is vulnerable to User Enumeration through authentication-related functionalities. The application returns distinguishable responses for valid and invalid users during userna...

CVE-2026-53908

MCO is vulnerable to User Enumeration through authentication-related functionalities. The application returns distinguis

历史摘要 · 未重新核验 · NVD

#cve #cwe-204

漏洞预警2026-07-01 发布INFO

MCO is vulnerable to Stored Cross‑Site Scripting (XSS) via the application logo upload functionality. An attacker with the ability to change the application logo can upload a cr...

CVE-2026-53907

MCO is vulnerable to Stored Cross‑Site Scripting (XSS) via the application logo upload functionality. An attacker with t

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-01 发布INFO

MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality related to data export and upload. Improper validation of the filename parameter allows wr...

CVE-2026-53906

MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality related to data export and upload

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-209

漏洞预警2026-07-01 发布INFO

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hierarchy/get-acl-tree-structure endpoint. An authenticated, low-privileged use...

CVE-2026-53905

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hierarchy/get-acl-tree

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-07-01 发布INFO

MCO is vulnerable to Account Denial of Service due to improper implementation of password reset functionality. Each password reset request invalidates previously set password as...

CVE-2026-53904

MCO is vulnerable to Account Denial of Service due to improper implementation of password reset functionality. Each pass

历史摘要 · 未重新核验 · NVD

#cve #cwe-307 #cwe-640

漏洞预警2026-07-01 发布INFO

MCO is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the /customer/servlet/mco/webapi/trading-document/fetchPdfStatement endpoint. The application do...

CVE-2026-53903

MCO is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the /customer/servlet/mco/webapi/tradin

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-07-01 发布INFO

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-sections/group-membership endpoint. An authenticated user can modify their group m...

CVE-2026-53902

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-sections/group-membership

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-863

漏洞预警2026-07-01 发布INFO

@fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when incoming request paths contain malformed percent-encoded...

CVE-2026-14181

@fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when

历史摘要 · 未重新核验 · NVD

#cve #cwe-248

漏洞预警2026-07-01 发布INFO

In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files with Content-Type: text/html and without a Content-Security-Policy or Content-Disp...

CVE-2026-13323

In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files with Content-Type: text/h

历史摘要 · 未重新核验 · NVD

#cve #cwe-79