2026-07-16 归档

今日共收录 1958 条安全情报,包含 992 个 CVE,550 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
漏洞预警2026-07-15 发布INFO

When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer re...

CVE-2026-52865

When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with per

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before r...

CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string express

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's authentication module stripped the scheme and netloc from ...

CVE-2026-33213

Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-60091. Reason: This candidate is a duplicate of CVE-2026-60091. Notes: All CVE users should ...

CVE-2026-62175

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-60091. Reason: This candidate is a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-58559

DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availabilit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Permission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58558

Permission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-58557

Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availab

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-58556

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-58555

Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect ava

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58554

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58553

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58552

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58551

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58550

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58549

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility c...

CVE-2026-46459

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote att...

CVE-2026-46458

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables o...

CVE-2026-15809

A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypasse

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system d...

CVE-2026-15779

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Grav before 9.1.8 contains an arbitrary file write vulnerability in the Form plugin's process.save.filename parameter, which is validated against path traversal before Twig proc...

CVE-2026-61873

Grav before 9.1.8 contains an arbitrary file write vulnerability in the Form plugin's process.save.filename parameter, w

历史摘要 · 未重新核验 · NVD