2026-07-07 归档

今日共收录 976 条安全情报，包含 239 个 CVE，384 篇安全通告，以及 83 篇研究论文。

← 返回归档列表

漏洞预警2026-07-06 发布INFO

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are rec...

CVE-2026-46588

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 t

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-06 发布INFO

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are rec...

CVE-2026-46587

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 t

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-06 发布INFO

Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12...

CVE-2026-44937

Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-07-06 发布INFO

Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0....

CVE-2026-44936

Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-07-06 发布INFO

An authenticated user could manipulate a company ID parameter in a POST request to the backend to gain unauthorised access to other companies hosted within the same subdomain en...

CVE-2026-12686

An authenticated user could manipulate a company ID parameter in a POST request to the backend to gain unauthorised acce

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-07-06 发布INFO

The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker ...

CVE-2025-8591

The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-06 发布INFO

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An aut...

CVE-2026-9165

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQ

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-07-06 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The camel-undertow HTTP server consumer exposes a muteException o...

CVE-2026-56139

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The came

历史摘要 · 未重新核验 · NVD

#cve #cwe-209

漏洞预警2026-07-06 发布INFO

Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely ('Failing Open') vulnerability in Apache Camel Keycloak Component. The KeycloakSecur...

CVE-2026-53913

Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely ('Failing Open') vulnerabili

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306 #cwe-636

漏洞预警2026-07-06 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component. The camel-netty-http HTTP server consumer exposes a muteExcepti...

CVE-2026-49365

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component. The ca

历史摘要 · 未重新核验 · NVD

#cve #cwe-209

漏洞预警2026-07-06 发布INFO

Improper Neutralization of Special Elements in Data Query Logic vulnerability in Apache Camel Neo4J component. The camel-neo4j producer builds the Cypher WHERE clause for its m...

CVE-2026-46591

Improper Neutralization of Special Elements in Data Query Logic vulnerability in Apache Camel Neo4J component. The came

历史摘要 · 未重新核验 · NVD

#cve #cwe-943

漏洞预警2026-07-06 发布INFO

Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel-pqc component persists post-quantum key metadata (KeyMetadata) through pluggable KeyLif...

CVE-2026-46590

Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel-pqc component persists post-qu

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-07-06 发布INFO

A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfile...

CVE-2026-44934

A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM

历史摘要 · 未重新核验 · NVD

#cve #cwe-215

漏洞预警2026-07-06 发布INFO

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default confi...

CVE-2026-43865

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component crea

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-07-06 发布INFO

Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deseria...

CVE-2026-42527

Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with sev

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-07-06 发布INFO

Deserialization of Untrusted Data vulnerability in Apache Camel. The camel-vertx-http component deserializes HTTP response bodies carrying the Content-Type application/x-java-s...

CVE-2026-40859

Deserialization of Untrusted Data vulnerability in Apache Camel. The camel-vertx-http component deserializes HTTP respo

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-07-06 发布INFO

Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some interface fails to impose reasonable limits on the time span and aggregation interval of the query. An at...

CVE-2026-24012

Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some interface fails to impose reasonable limits on t

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-07-06 发布INFO

uniFLOW Universal Login Manager (ULM) Standalone contains an information disclosure vulnerability that may allow an authenticated administrator to access sensitive configuration...

CVE-2026-1433

uniFLOW Universal Login Manager (ULM) Standalone contains an information disclosure vulnerability that may allow an auth

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-07-06 发布INFO

Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database conte...

CVE-2026-14809

Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing unauthenticated remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-06 发布INFO

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-...

CVE-2026-14802

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProce

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78