2026-07-17 归档

今日共收录 1302 条安全情报,包含 372 个 CVE,507 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-07-15 发布INFO

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as...

CVE-2026-45535

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connections can load attacker-controlled rsjdbc.ini configuration...

CVE-2026-45534

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connecti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema() into getTab...

CVE-2026-45417

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

o   CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to pot...

CVE-2026-40957

o   CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can crea...

CVE-2026-40953

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client...

CVE-2026-40952

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, TDengine Enterprise allowed an authenticated low-privilege SQL user to run KILL S...

CVE-2026-62348

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, TDengine Enterprise allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attacker with local access could potentially exploit this vulne...

CVE-2026-56687

Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2...

CVE-2026-20298

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.2.2510.18, and 10.1.2507.24...

CVE-2026-20297

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2...

CVE-2026-20296

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform path traversa...

CVE-2026-20146

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby inserts dropped file paths from tabby-electron/src/pathDrop.ts into the active shel...

CVE-2026-46709

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby inserts dropped file paths

历史摘要 · 未重新核验 · NVD

学术论文2026-07-14 发布INFO

Open-Source Intelligence and Music Information Retrieval for Geographic Attribution of Musical Affect and the Ecological Limits of Population Inference

本研究探讨了音乐情感特征与人口心理特征之间的地理关联,并检验了常见直觉——即一个地区的音乐反映其民众的性情。作者使用埃森民歌集(Essen Folksong Collection)中来自16个国家和7个地理区域的2393首去重民歌的符号乐谱

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-07-17 发布INFO

决赛直播|第四届阿里CTF安全挑战赛

该文为第四届阿里CTF安全挑战赛决赛直播的通知,标题为'决赛直播|第四届阿里CTF安全挑战赛',来源于阿里云先知社区。文章内容主要宣传比赛决赛直播的时间、观看方式等,未涉及任何安全威胁、漏洞或攻击活动。因此,该情报对防御团队无直接参考价值。

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-07-17 发布INFO

抢先加入AI时代顶尖安全团队!阿里云2027届实习生招聘来了!

该文章是阿里云2027届实习生招聘信息,发布于先知社区,内容为招聘AI时代顶尖安全团队的实习生。文章不涉及任何安全威胁、漏洞、攻击活动或恶意软件,属于正常的企业招聘宣传。

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-07-17 发布INFO

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-07-17 发布INFO

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-07-17 发布INFO

Our Infrastructure

Our Infrastructure

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-07-17 发布INFO

OpenClaw安全使用实践指南

OpenClaw安全使用实践指南

历史摘要 · 未重新核验 · CNCERT