2026-07-15 归档

今日共收录 995 条安全情报,包含 81 个 CVE,528 篇安全通告,以及 87 篇研究论文。

← 返回归档列表
安全公告2026-07-15 发布INFO

An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the...

CVE-2026-13230

An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechan

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read...

CVE-2026-9770

Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not...

CVE-2026-13585

Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote...

CVE-2026-8919

Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local us

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface,...

CVE-2026-15029

Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Mana

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS...

CVE-2026-15030

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Improper Restriction of Communication Channel to Intended Endpoints and External Control of File...

CVE-2026-8920

Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute...

CVE-2026-51808

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the open

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2,...

CVE-2025-56362

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Lev

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

A vulnerability was found in zhinianboke xianyu-auto-reply up to...

CVE-2026-15752

A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f929da84. Affected is a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0,...

CVE-2025-56363

A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute...

CVE-2026-51807

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the j2k_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden...

CVE-2026-5269

In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used fo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts...

CVE-2026-36035

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Ser

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4...

CVE-2025-56364

A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this...

CVE-2026-15753

A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The...

CVE-2026-15751

A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The affected element is th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could...

CVE-2026-48354

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary...

CVE-2026-48337

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary...

CVE-2026-48335

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

历史摘要 · 未重新核验 · GitHub Advisory