Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can...
CVE-2026-14612
Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memor
2026-07-04 归档
今日共收录 996 条安全情报，包含 192 个 CVE，454 篇安全通告，以及 95 篇研究论文。
← 返回归档列表Kiwi TCMS's /init-db/ page renders and responds to requests after first use
CVE-2026-49292
Kiwi TCMS provides the /init-db/ page as part of its setup mechanism for administrators who prefer a browser instead of
fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection
CVE-2026-52830
## Summary fast-mcp-telegram validates HTTP Bearer tokens by joining the raw token string into a session-file path. The
Steeltoe: TLS private keys written to /tmp with default permissions, never deleted
CVE-2026-50267
### Summary When MySQL or PostgreSQL service bindings from `VCAP_SERVICES` include TLS client credentials, the Connecto
Steeltoe's static JWKS cache shared across schemes and never invalidated
CVE-2026-50202
### Summary The JWT signing key cache in `TokenKeyResolver` uses `kid` as the sole cache key without namespacing by aut
Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission
CVE-2026-50201
### Summary All Steeltoe actuator endpoints default to `EndpointPermissions.Restricted`, which is mapped to Cloud Found
Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords
CVE-2026-50200
### Summary The `Sanitizer` component in the Environment actuator redacts configuration values by matching the configur
SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass
CVE-2026-49283
## Summary SimpleSAMLphp's HTTP-Artifact receive path can treat an unsigned embedded SAML `Response` as cryptographical
Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalation via /usr/bin/apt-get arguments
CVE-2026-52817
### Summary In the [Debian.sudoers](https://github.com/Linuxfabrik/monitoring-plugins/blob/main/assets/sudoers/Debian.su
Firewall for AI
Firewall for AI
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 15.8.7 and iPadOS 15.8.7