Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability....
CVE-2026-56687
Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attack
2026-07-16 归档
今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。
← 返回归档列表Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save() method (used by the...
CVE-2026-58660
Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-d
BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulnerability...
CVE-2026-59255
BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulnerability in the custom-nodes AP
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment...
CVE-2026-62389
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers wh
GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information...
CVE-2026-58658
GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that a
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20187
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20158
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20157
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When...
CVE-2026-60005
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and
Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on...
CVE-2026-61371
Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20153
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting ...
CVE-2026-1563
Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a u
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20156
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20150
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS)...
CVE-2026-1562
Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-9007
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL
MantisBT: Reflected XSS in admin/install.php
CVE-2026-52847
MantisBT 2.28.3 and earlier contains six reflected XSS injection points in `/admin/install.php`. User-supplied parameter
Protobuf: Unbounded recursion depth in embedded-message decoding
CVE-2026-54451
### Summary Unbounded recursion depth in `Protobuf.Decoder` (Hex package `protobuf`, versions `>= 0.8.0, >` (tag `0x0A`
Why Not Fix It Once and for All? An Empirical Study of Multiple Patches for Vulnerability Fixes in Open-Source Software
该论文针对开源软件漏洞修复过程中常见的“多补丁”现象进行了系统的实证研究。在安全补丁管理中，一个漏洞往往不是通过单个补丁就能完全修复，而是需要一系列补丁。然而，如何确定漏洞在补丁序列中的哪个步骤被完全修复，以及多补丁修复的根因和特征，目前缺
京公网安备 11000002002063号
输入信息不完整，无法生成有效的威胁情报摘要。所提供的标题为公安备案号，来源为360CERT安全报告但无正文内容，无法提取任何攻击活动、威胁行为者、恶意软件或漏洞信息。建议提供完整的情报文章内容以便分析。