In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a ...

CVE-2026-62642

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which ma

历史摘要 · 未重新核验 · NVD

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size.

CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a craft

历史摘要 · 未重新核验 · NVD

Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event creation or edit permissions to inject arbitrary HTML and Ja...

CVE-2026-60119

Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event cre

历史摘要 · 未重新核验 · NVD

Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidde...

CVE-2026-60118

Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated

历史摘要 · 未重新核验 · NVD

DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an array of data for the parser. An...

CVE-2026-60081

DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump file

历史摘要 · 未重新核验 · NVD

Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowi...

CVE-2026-59203

Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a n

历史摘要 · 未重新核验 · NVD

Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-...

CVE-2026-59199

Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-o

历史摘要 · 未重新核验 · NVD

Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple allows account takeover via unvalidated ID token claims. The Ueberauth.Strategy.Apple.Token.payload...

CVE-2026-55954

Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple allows account takeover via unvalidated ID

历史摘要 · 未重新核验 · NVD

Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `application/controllers/Caldav.php:60` hands the request's ...

CVE-2026-52840

Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `ap

历史摘要 · 未重新核验 · NVD

Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appointments in the `appointments/search` response, proving th...

CVE-2026-52839

Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appoi

历史摘要 · 未重新核验 · NVD

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a man...

CVE-2026-15697

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/

历史摘要 · 未重新核验 · NVD

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file p...

CVE-2026-15392

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The co

历史摘要 · 未重新核验 · NVD

An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload ...

CVE-2026-14504

An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on

历史摘要 · 未重新核验 · NVD

A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a t...

CVE-2026-11403

A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

2026年7月16日，阿里云安全团队在先知社区发布了第四届阿里CTF安全挑战赛决赛直播预告。该比赛旨在通过模拟真实安全攻防场景，检验并提升参赛者的网络安全实战能力，涵盖Web渗透、二进制漏洞利用、逆向工程、密码学等多个领域。活动面向全球安全

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该文章为阿里云2027届实习生招聘公告，发布于阿里云先知社区。内容涉及招聘面向AI时代的安全团队实习生，包括岗位需求、应聘流程等。不包含任何安全威胁、漏洞、攻击事件或防御建议，与威胁情报无关。

历史摘要 · 未重新核验 · 先知社区

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT