2026-07-22 归档

今日共收录 2277 条安全情报,包含 1464 个 CVE,419 篇安全通告,以及 96 篇研究论文。

← 返回归档列表
漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lo...

CVE-2026-28313

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijackin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact i...

CVE-2026-28312

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system adm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impac...

CVE-2026-28310

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows...

CVE-2026-28309

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create syst

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The im...

CVE-2026-28308

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows ...

CVE-2026-28307

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is low...

CVE-2026-28306

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate thei

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin privileges ...

CVE-2026-28305

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in W...

CVE-2026-28304

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary exe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue req...

CVE-2026-28302

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege esc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability that allows a subsite Administrator to trigger network-wide...

CVE-2026-65049

Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulnerability in the Repeatable Fieldset feature where pa...

CVE-2026-65048

Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these co...

CVE-2026-16412

Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruptio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited...

CVE-2026-16411

Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153.

CVE-2026-16408

Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153.

CVE-2026-16406

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153.

CVE-2026-16395

Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153.

CVE-2026-16394

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Memory safety bugs present in Firefox ESR 115.37 and Firefox ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of t...

CVE-2026-16361

Memory safety bugs present in Firefox ESR 115.37 and Firefox ESR 140.12. Some of these bugs showed evidence of memory co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13.

CVE-2026-16359

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ES

历史摘要 · 未重新核验 · NVD