2026-07-21 归档

今日共收录 1301 条安全情报，包含 465 个 CVE，462 篇安全通告，以及 91 篇研究论文。

← 返回归档列表

漏洞预警2026-07-20 发布INFO

The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing unauthenticated users to overwrite the content of arbitrar...

CVE-2026-12723

The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing u

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-07-20 发布INFO

The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before outputting it in its admin analytics reports, allowing unauthe...

CVE-2026-12592

The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before outpu

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-20 发布INFO

The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking cancellation action, which is also exposed to unauthenticated users,...

CVE-2026-11868

The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking cancellatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-07-20 发布INFO

The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before us...

CVE-2026-11349

The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-20 发布INFO

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges s...

CVE-2026-10755

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-07-20 发布INFO

The Reviews Feed WordPress plugin before 2.6.5 does not neutralize WordPress shortcodes contained in third-party review content before rendering it through its dynamic block, a...

CVE-2026-10724

The Reviews Feed WordPress plugin before 2.6.5 does not neutralize WordPress shortcodes contained in third-party review

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-07-20 发布INFO

The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fetched from the Serp API before rendering it in the Google...

CVE-2026-10081

The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fe

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-20 发布INFO

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom `html_purify` validation rule used to sanitize blog post bodies relies o...

CVE-2026-45138

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom `html_purify` v

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-19 发布INFO

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public `keras.layers.TorchModuleWrapper.f...

CVE-2026-12484

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle d

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() On x86 32-bit with THP...

CVE-2026-64181

In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing suppor

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding the bnep_session_sem...

CVE-2026-64178

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_ad

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still en...

CVE-2026-64176

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware crashes (e.g., NMI_INTERRUPT_UNKN...

CVE-2026-64175

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Hygon Family 18h CPUs are der...

CVE-2026-64172

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd open O_RDWR In netfs_perform_write(), "write streaming" (the c...

CVE-2026-64158

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd open O

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Commit "iommu: return full error code fr...

CVE-2026-64153

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabled Sashiko noticed a latent bug where the map error flow...

CVE-2026-64152

In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabl

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the driver could drop PA...

CVE-2026-64151

In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait Fix two cases where pdsc_devcmd_wait() returns stale succe...

CVE-2026-64148

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait F

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compare_guid_key() session_fd_check() walks the per-inode m_op_list ...

CVE-2026-64141

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compare_guid

历史摘要 · 未重新核验 · NVD

#cve