2026-07-07 归档

今日共收录 976 条安全情报,包含 239 个 CVE,384 篇安全通告,以及 83 篇研究论文。

← 返回归档列表
安全公告2026-07-06 发布INFO

cut: -s ignored in -z -d '' newline-delimiter mode

CVE-2026-35381

`cut` routes `-z -d ''` through a special newline-delimiter path that ignores the `-s` only-delimited flag, emitting who

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

CVE-2026-55794

### Requirements: * Control panel access * Permissions to edit an entry ### Details Control panel users with the abil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that...

CVE-2026-59713

Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true without

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing...

CVE-2026-59712

Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

showdown contains a cross-site scripting vulnerability in metadata title handling that allows...

CVE-2026-59711

showdown contains a cross-site scripting vulnerability in metadata title handling that allows attackers to inject arbitr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14...

CVE-2026-55727

A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when updating prepared commands with invalid port indices based on user space...

CVE-2026-21384

Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during...

CVE-2026-21368

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when handling flash commands due to outdated LED count values being used after...

CVE-2026-21369

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when processing asynchronous input parameters due to improper handling of...

CVE-2026-25271

Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between chec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed...

CVE-2026-21370

Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability...

CVE-2026-48267

DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

CVE-2026-21379

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching...

CVE-2026-25268

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which...

CVE-2026-21383

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value fo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

HashiCorp Terraform Enterprise contained an issue in its version control system (VCS) ingestion...

CVE-2026-14468

HashiCorp Terraform Enterprise contained an issue in its version control system (VCS) ingestion of registry modules that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

CVE-2025-59617

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when invoking device input/output control operations for mapping and unmapping...

CVE-2025-59615

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image...

CVE-2026-59089

A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input...

CVE-2025-59616

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing alrea

历史摘要 · 未重新核验 · GitHub Advisory