Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-53478
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
2026-07-04 归档
今日共收录 996 条安全情报，包含 192 个 CVE，454 篇安全通告，以及 95 篇研究论文。
← 返回归档列表Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-49814
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-49815
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability...
CVE-2026-14459
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Softw
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-46464
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-49813
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-46466
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute...
CVE-2026-14460
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Ar
golang.org/x/image/tiff has excessive resource consumption in PackBits decompression
CVE-2026-46599
The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit
SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`
CVE-2026-49284
## Summary SimpleSAMLphp's SAML SP ACS path does not enforce the IdP selected for an SP-initiated login. If a saved SP
Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename
CVE-2026-52792
### Summary Algernon selects its file handler from `filepath.Ext()` (engine/handlers.go:134), which does not treat the
jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow
CVE-2026-52834
### Summary On 32-bit platforms, decoding a crafted image may lead to out-of-bounds writes due to integer overflow in l
Keycloak: Unauthorized access via improper validation of encrypted SAML assertions
CVE-2026-2092
Keycloak's SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not si
Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding
CVE-2026-50268
### Summary Configuring `encrypt:rsa:algorithm=OAEP` does not enable OAEP encryption. Due to an incorrect BouncyCastle
Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch
CVE-2026-50196
### Summary `DataCenterInfo.FromJson` throws `ArgumentException` for any `name` value other than `"MyOwn"` or `"Amazon"
Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
CVE-2026-50194
### Summary When Steeltoe management endpoints are configured to listen on an alternate port (`Management:Endpoints:Por
SimpleSAMLphp has Possible DoS via XPath Transform
CVE-2026-49289
## Summary This library turned out to be vulnerable to Denial-of-Service attacks using XPath transforms. A mitigation h
Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update
CVE-2026-52829
### Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node listens on the d
jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustion
CVE-2026-52746
### Impact In JSONata `= 2.2.0 via fixes that include https://github.com/jsonata-js/jsonata/pull/782 and https://github.
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...