2026-07-22 归档

今日共收录 2277 条安全情报，包含 1464 个 CVE，419 篇安全通告，以及 96 篇研究论文。

← 返回归档列表

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 14.1.3.2. Easily ex...

CVE-2026-46982

Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-21 发布INFO

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with ne...

CVE-2026-46924

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploita

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-21 发布INFO

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with ne...

CVE-2026-46876

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploita

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-21 发布INFO

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with ne...

CVE-2026-35290

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploita

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-21 发布INFO

Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying a...

CVE-2026-65057

Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-07-21 发布INFO

lmdeploy's OpenAI-compatible API server contains a server-side request forgery vulnerability that allows unauthenticated attackers to access internal services and cloud metadata...

CVE-2026-63764

lmdeploy's OpenAI-compatible API server contains a server-side request forgery vulnerability that allows unauthenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-07-21 发布INFO

A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve c...

CVE-2026-64879

A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-21 发布INFO

Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via ...

CVE-2026-64878

Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-21 发布INFO

Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by mani...

CVE-2016-20096

Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows r

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-21 发布INFO

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 are vulnerable to vertical privilege escalation. The `PATCH /workspa...

CVE-2026-47416

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 are vulnera

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-862

漏洞预警2026-07-21 发布INFO

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have aprivilege escalation / cross-tenant member injection. The `POS...

CVE-2026-47413

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have aprivi

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-862

漏洞预警2026-07-21 发布INFO

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret d...

CVE-2026-47410

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an ins

历史摘要 · 未重新核验 · NVD

#cve #cwe-321 #cwe-798

漏洞预警2026-07-21 发布INFO

Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesyste...

CVE-2026-64825

Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to wri

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-21 发布INFO

PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (`praisonai.deploy.api.generate_api_server_code`) t...

CVE-2026-47393

PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-gene

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-1188

漏洞预警2026-07-21 发布INFO

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, `execute_code()` in `praisonaiagents/tools/pyt...

CVE-2026-47392

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praiso

历史摘要 · 未重新核验 · NVD

#cve #cwe-184 #cwe-693

漏洞预警2026-07-21 发布INFO

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC endpoint and registers a `ca...

CVE-2026-47391

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an

历史摘要 · 未重新核验 · NVD

#cve #cwe-95 #cwe-306

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute ...

CVE-2026-28321

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, w

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access....

CVE-2026-28317

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege esc

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administrator with the ability to exe...

CVE-2026-28316

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege esc

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required. The impact is lower in Win...

CVE-2026-28314

SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. Us

历史摘要 · 未重新核验 · NVD

#cve #cwe-639