2026-07-07 归档

今日共收录 976 条安全情报，包含 239 个 CVE，384 篇安全通告，以及 83 篇研究论文。

漏洞预警2026-07-06 发布INFO

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Guest API invoice/update endpoint is missing an authorization check present ...

CVE-2026-42331

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Guest API invoice/u

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-863

漏洞预警2026-07-06 发布INFO

Improper Neutralization of Special Elements in the metrics-service retention policy management component in Amazon mcp-gateway-registry before 1.0.13 might allow an authenticate...

CVE-2026-14471

Improper Neutralization of Special Elements in the metrics-service retention policy management component in Amazon mcp-g

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-06 发布INFO

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reach...

CVE-2026-13122

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service v

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-07-06 发布INFO

A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentia...

CVE-2026-13698

A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote a

历史摘要 · 未重新核验 · NVD

#cve #cwe-401 #cwe-770

漏洞预警2026-07-06 发布INFO

The throttling event handling mechanism in multiple WSO2 products accepts user-supplied JSON payloads without sufficient validation of their structure and content. This allows a...

CVE-2026-4249

The throttling event handling mechanism in multiple WSO2 products accepts user-supplied JSON payloads without sufficient

历史摘要 · 未重新核验 · NVD

#cve #cwe-707

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Iggy component. The c...

CVE-2026-55994

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-200 #cwe-918

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Atmosphere Websocket C...

CVE-2026-55993

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-200 #cwe-918

漏洞预警2026-07-06 发布INFO

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Authorization Bypass Through User-Controlled Key vulnerability in Apache Came...

CVE-2026-49099

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Authorization Bypass

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-639

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Kafka Component. The...

CVE-2026-49098

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Inject

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-74

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel IRC component. The c...

CVE-2026-49097

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Inject

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-74

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer (DaprPubSubCo...

CVE-2026-49086

Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel DAPR compo

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-441

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel JIRA component. The camel-jira producers read their operation paramete...

CVE-2026-48206

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel JIRA component

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-639

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Vertx Websocket compon...

CVE-2026-46726

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-200 #cwe-918

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel CXF SOAP component. The camel-cxf producer selects which SOAP oper...

CVE-2026-46592

Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel CXF SOAP c

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-441

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Lucene Component. The camel-lucene producer reads the search phrase fr...

CVE-2026-46585

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Lucene Compone

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-639

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Mail Component. The camel-mail producer (MailProducer.getSen...

CVE-2026-46584

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Mail

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-200

漏洞预警2026-07-06 发布INFO

Improper Input Validation vulnerability in Apache Camel NATS component. The camel-nats component maps inbound NATS message headers into the Camel Exchange but defaulted its hea...

CVE-2026-46457

Improper Input Validation vulnerability in Apache Camel NATS component. The camel-nats component maps inbound NATS mess

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client. The camel-elasticsearch-rest-client compone...

CVE-2026-46453

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-639

漏洞预警2026-07-06 发布INFO

Deserialization of Untrusted Data vulnerability in Apache Camel, Apache Camel JMS component. JmsBinding.extractBodyFromJms() in camel-jms - and the equivalent JmsBinding in cam...

CVE-2026-43866

Deserialization of Untrusted Data vulnerability in Apache Camel, Apache Camel JMS component. JmsBinding.extractBodyFrom

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

威胁情报2026-07-06 发布INFO

Max severity Adobe ColdFusion flaw now exploited in attacks

CVE-2026-48282

Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to v

历史摘要 · 未重新核验 · BleepingComputer

#ransomware #cybersecurity #news