2026-07-22 归档

今日共收录 2277 条安全情报,包含 1464 个 CVE,419 篇安全通告,以及 96 篇研究论文。

← 返回归档列表
漏洞预警2026-07-21 发布INFO

Shelf is a platform for tracking physical assets. Shelf is multi-tenant; data is isolated per organization (workspace). Prior to version 1.20.2, several endpoints accepted entit...

CVE-2026-47697

Shelf is a platform for tracking physical assets. Shelf is multi-tenant; data is isolated per organization (workspace).

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to version 1.119.0, CC-Tweaked's HTTP API (`http.request`, `http.webso...

CVE-2026-47695

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to version 1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vuln...

CVE-2026-47690

MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `buildRow()` method in `fogpage.class....

CVE-2026-47689

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `clearAES` and `clearPMTasks` methods ...

CVE-2026-47688

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `selectForm()` helper in `fogpage.clas...

CVE-2026-47687

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the unauthenticated inventory service endp...

CVE-2026-47685

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official mani...

CVE-2026-47237

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to versio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcod...

CVE-2026-47143

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMR

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Request Forgery (SSRF) vulnerability in get_image_info() all...

CVE-2026-46556

FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Req

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow (out-of-bounds READ) exists in `decoder_context::decode_...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAd...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_sl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands...

CVE-2026-44879

A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem. Success...

CVE-2026-44878

A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools.

CVE-2026-30633

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrary code via crafted path to `computer_...

CVE-2026-30631

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc instead of s2n_realloc to store the peer's transport parameters. When a TLS 1.3 connection ...

CVE-2026-16318

The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc instead of s2n_realloc to store th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Missing validation of the outer content_type byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-middle to silently discard individual application data reco...

CVE-2026-16317

Missing validation of the outer content_type byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-mi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Tanium addressed an information disclosure vulnerability in Connect.

CVE-2026-12139

Tanium addressed an information disclosure vulnerability in Connect.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.

CVE-2026-11925

Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.

历史摘要 · 未重新核验 · NVD