2026-07-10 归档

今日共收录 1398 条安全情报,包含 466 个 CVE,522 篇安全通告,以及 115 篇研究论文。

← 返回归档列表
安全公告2026-07-10 发布INFO

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding...

CVE-2026-57031

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper N

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-10 发布INFO

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding...

CVE-2026-57020

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper N

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-10 发布INFO

A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of...

CVE-2026-57024

A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos O

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-10 发布INFO

An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos...

CVE-2026-57021

An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

OpenRun: Redirect URL validation bypass using  //host  paths leads to Open Redirect

CVE-2026-55252

### Summary The restrictions on redirect URLs in `openrun` can be bypassed by attackers, leading to open redirect attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

mint has potential CRLF injection in its HTTP request line via unvalidated `method`/`target`

CVE-2026-48861

### Summary Mint's HTTP/1 request encoder splices the caller-supplied `method` and `target` directly into the request l

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally...

CVE-2026-0275

A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administ

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an...

CVE-2026-0277

An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a ma

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an...

CVE-2026-0281

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated...

CVE-2026-0282

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network ac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto...

CVE-2026-0283

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software...

CVE-2026-0280

An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software...

CVE-2026-0286

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks...

CVE-2026-0284

An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enabl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an...

CVE-2026-0287

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive...

CVE-2026-0279

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, Global

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables...

CVE-2026-0285

A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated admini

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

Sylius: IDOR on Shop Payment Request API endpoints

CVE-2026-53639

### Impact The `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

YesWiki has Unsafe eval() in its Formula Calculato, Leading to Remote Code Execution & Denial of Service

CVE-2026-52778

### Summary An unsafe execution vulnerability exists in the Bazar form field calculator (CalcField.php) of YesWiki. The

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-10 发布INFO

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile代码注入漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug