2026-07-18 归档

今日共收录 1491 条安全情报，包含 418 个 CVE，581 篇安全通告，以及 194 篇研究论文。

← 返回归档列表

漏洞预警2026-07-16 发布INFO

YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In the bundled libsyck newline_len and is_newline dereference...

CVE-2026-57077

YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In t

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-07-16 发布INFO

YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor. In the bundled libsyck an anchor...

CVE-2026-57076

YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key i

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-07-16 发布INFO

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user...

CVE-2026-53411

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-16 发布INFO

Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the underlying URL methods for the KirbyTags and image blocks components did not filter ...

CVE-2026-45368

Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the underlying URL methods for

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-16 发布INFO

Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the content-locking feature returned lock information without checking the requesting us...

CVE-2026-45334

Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the content-locking feature ret

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-07-16 发布INFO

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correctly validate the provided user ID, resulting in a path tra...

CVE-2026-44177

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correct

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-98

漏洞预警2026-07-16 发布INFO

Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, Kirby did not securely sanitize the contents of the list field on save, leaving it vulne...

CVE-2026-44175

Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, Kirby did not securely sanitize

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-16 发布INFO

Kirby is an open-source content management system. Prior to 4.9.1 and 5.4.1, Kirby did not validate the model attributes that were used in its collection queries, allowing attac...

CVE-2026-44174

Kirby is an open-source content management system. Prior to 4.9.1 and 5.4.1, Kirby did not validate the model attributes

历史摘要 · 未重新核验 · NVD

#cve #cwe-470

漏洞预警2026-07-16 发布INFO

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Customer Import in all versions up to, and including, 2.4.3...

CVE-2026-14782

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Cu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-16 发布INFO

YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In the bundled libsyck, when an ...

CVE-2026-13713

YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on

历史摘要 · 未重新核验 · NVD

#cve #cwe-415 #cwe-416

漏洞预警2026-07-16 发布INFO

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash.

CVE-2026-61378

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to

历史摘要 · 未重新核验 · NVD

#cve #cwe-369

漏洞预警2026-07-16 发布INFO

An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device. This can lead to a system crash or disclosure of...

CVE-2026-60073

An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-07-16 发布INFO

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead t...

CVE-2026-57896

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupti

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-07-16 发布INFO

WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix for CVE-2026-33482 was incomplete and still does ...

CVE-2026-55173

WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-16 发布INFO

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user...

CVE-2026-53410

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-07-16 发布INFO

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.

CVE-2026-53409

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-16 发布INFO

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not suff...

CVE-2026-44023

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-918

漏洞预警2026-07-16 发布INFO

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow ...

CVE-2026-44019

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.

历史摘要 · 未重新核验 · NVD

#cve #cwe-73 #cwe-400

漏洞预警2026-07-16 发布INFO

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination request...

CVE-2026-36425

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-07-16 发布INFO

WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.php contains a signature verification b...

CVE-2026-33731

WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/Aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-345