MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
2026-07-17 归档
今日共收录 1302 条安全情报，包含 372 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
iOS 26.5.2 and iPadOS 26.5.2
iOS 26.5.2 and iPadOS 26.5.2
MFSA 2026-65Security Vulnerabilities fixed in Firefox for iOS 152.3
MFSA 2026-65Security Vulnerabilities fixed in Firefox for iOS 152.3
【大模型服务平台 TokenHub】&【智能体开发平台】& 【云开发 CloudBase】 关于腾讯云 MiniMax-M2.5 模型下线及切换升级的通知
【大模型服务平台 TokenHub】&【智能体开发平台】& 【云开发 CloudBase】 关于腾讯云 MiniMax-M2.5 模型下线及切换升级的通知
MFSA 2026-66Security Vulnerabilities fixed in Firefox for iOS 152.4
MFSA 2026-66Security Vulnerabilities fixed in Firefox for iOS 152.4
APSB26-77: Security update available for Adobe Creative Cloud Desktop Application
APSB26-77: Security update available for Adobe Creative Cloud Desktop Application
clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet...
CVE-2026-62241
clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me')
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access-Control-Allow...
CVE-2026-62387
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access-Control-Allow-Origin: * as its default C
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens...
CVE-2026-62386
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query
OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in...
CVE-2026-62227
OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that
OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser...
CVE-2026-62226
OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to
The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,...
CVE-2026-14956
The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and...
CVE-2026-53412
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Wind
Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM...
CVE-2026-15997
Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffer
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately...
CVE-2026-15422
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address
MCP Python SDK: WebSocket server transport does not support Host/Origin validation
CVE-2026-59950
### Summary In affected versions, the deprecated WebSocket server transport (`mcp.server.websocket.websocket_server`) ac
Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise
CVE-2026-55579
### Summary Pheditor ships with a hardcoded default password `admin` (SHA-512 hash stored at `pheditor.php:11`). There
ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)
CVE-2026-54076
### Impact The fix for CVE-2026-44221 (GHSA-fxc7-fm93-6q77) added an `UPDATE_SCHEMA` authorization check to a single sc