2026-07-16 归档

今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。

漏洞预警2026-07-14 发布INFO

Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the at...

CVE-2026-48001

Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-14 发布INFO

Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that...

CVE-2026-48000

Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-07-14 发布INFO

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable fo...

CVE-2026-47999

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privilege

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-14 发布INFO

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass se...

CVE-2026-47998

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-07-14 发布INFO

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass se...

CVE-2026-47997

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-07-14 发布INFO

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerabili...

CVE-2026-47996

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-07-14 发布INFO

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable fo...

CVE-2026-47995

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privilege

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-14 发布INFO

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable for...

CVE-2026-47994

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-14 发布INFO

Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution...

CVE-2026-47992

Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-14 发布INFO

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when set_remote_address proxy_protocol: :v1 is e...

CVE-2026-47737

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP

历史摘要 · 未重新核验 · NVD

#cve #cwe-290 #cwe-345

漏洞预警2026-07-14 发布INFO

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, when PROXY protocol v1 support is enabled, Puma reads incoming bytes into an internal buf...

CVE-2026-47736

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, when PROXY protocol v1 support i

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-07-14 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vu...

CVE-2026-47482

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-07-14 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful explo...

CVE-2026-47481

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass t

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-07-14 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to den...

CVE-2026-47480

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A s

历史摘要 · 未重新核验 · NVD

#cve #cwe-248

漏洞预警2026-07-14 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might...

CVE-2026-47479

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource cons

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-07-14 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability m...

CVE-2026-47478

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file

历史摘要 · 未重新核验 · NVD

#cve #cwe-910

漏洞预警2026-07-14 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lea...

CVE-2026-47477

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overf

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-07-14 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might...

CVE-2026-47476

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource cons

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-07-14 发布INFO

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedcontent by default, allowing browsers to re-clone an XSS pa...

CVE-2026-47423

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedco

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, TwilioRequestParser::doParse() received th...

CVE-2026-47212

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-347