2026-07-17 归档

今日共收录 1302 条安全情报，包含 372 个 CVE，507 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-07-16 发布INFO

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.

CVE-2026-53409

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-16 发布INFO

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not suff...

CVE-2026-44023

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-918

漏洞预警2026-07-16 发布INFO

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow ...

CVE-2026-44019

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.

历史摘要 · 未重新核验 · NVD

#cve #cwe-73 #cwe-400

漏洞预警2026-07-16 发布INFO

A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to access sensitive database information via crafted SQL statem...

CVE-2026-38158

A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to acc

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-16 发布INFO

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination request...

CVE-2026-36425

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-16 发布INFO

WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.php contains a signature verification b...

CVE-2026-33731

WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/Aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-07-16 发布INFO

WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker compose configuration. The official d...

CVE-2026-33692

WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-16 发布INFO

SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation attack that could allow an authorized attacker to access a...

CVE-2026-11889

SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation at

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-07-16 发布INFO

EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allow...

CVE-2024-34268

EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-16 发布INFO

Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the update URLs co...

CVE-2024-32389

Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attack

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-16 发布INFO

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the community string component.

CVE-2024-32387

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitiv

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-16 发布INFO

Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the SNMP updat...

CVE-2024-32386

Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote at

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-16 发布INFO

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via a boardID and revisionID components

CVE-2024-32385

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitiv

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-16 发布INFO

remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The...

CVE-2026-63397

remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed t

历史摘要 · 未重新核验 · NVD

#cve #cwe-116

漏洞预警2026-07-16 发布INFO

CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured wi...

CVE-2026-62994

CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS client allowed to request AXFR for a CoreD

历史摘要 · 未重新核验 · NVD

#cve #cwe-248 #cwe-755

漏洞预警2026-07-16 发布INFO

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.4, Centrifugo unidirectional WebSocket transport with uni_websocket.compression enabled enforced u...

CVE-2026-62963

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.4, Centrifugo unidirectional WebSocket tr

历史摘要 · 未重新核验 · NVD

#cve #cwe-409

漏洞预警2026-07-16 发布INFO

CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when the proxyproto plugin is enabled because plugin/pkg/prox...

CVE-2026-62309

CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-07-16 发布INFO

CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an optional revert flag, and two response rules, edns0SetRes...

CVE-2026-62299

CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-07-16 发布INFO

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. ...

CVE-2026-62290

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the proc

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-07-16 发布INFO

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting i...

CVE-2026-61389

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupt

历史摘要 · 未重新核验 · NVD

#cve #cwe-787