2026-07-16 归档

今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。

漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension:...

CVE-2026-48808

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but

历史摘要 · 未重新核验 · NVD

#cve #cwe-693 #cwe-863

漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable values passed to join and replace filters or operands evalua...

CVE-2026-48807

Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable val

历史摘要 · 未重新核验 · NVD

#cve #cwe-693 #cwe-863

漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerced to strings, allowing PHP to invoke __toString() on a S...

CVE-2026-48806

Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerc

历史摘要 · 未重新核验 · NVD

#cve #cwe-693 #cwe-863

漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forward the current sandbox state to CoreExtension::checkArro...

CVE-2026-48805

Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forw

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulner...

CVE-2026-48357

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vuln...

CVE-2026-48354

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to ...

CVE-2026-48353

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file syst

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabi...

CVE-2026-48352

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabi...

CVE-2026-48351

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-14 发布INFO

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ...

CVE-2026-48337

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-07-14 发布INFO

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ...

CVE-2026-48336

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-07-14 发布INFO

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ...

CVE-2026-48335

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability t...

CVE-2026-48312

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabi...

CVE-2026-48302

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit t...

CVE-2026-48298

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit t...

CVE-2026-48296

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage...

CVE-2026-48295

CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclo

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An at...

CVE-2026-48290

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends o...

CVE-2026-48287

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execut

历史摘要 · 未重新核验 · NVD

#cve #cwe-426

漏洞预警2026-07-14 发布INFO

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...

CVE-2026-48275

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the c

历史摘要 · 未重新核验 · NVD

#cve #cwe-426