2026-07-22 归档

今日共收录 2277 条安全情报,包含 1464 个 CVE,419 篇安全通告,以及 96 篇研究论文。

← 返回归档列表
漏洞预警2026-07-21 发布INFO

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker t...

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Sparkle is a software update framework for macOS. Prior to version 2.9.2, `Autoupdate/SUBinaryDeltaApply.m` enforces `relativePath.pathComponents containsObject:@".."` and rejec...

CVE-2026-47121

Sparkle is a software update framework for macOS. Prior to version 2.9.2, `Autoupdate/SUBinaryDeltaApply.m` enforces `re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multi_uploadify.php. The manipulation of the argument Fi...

CVE-2026-16447

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

In Microsoft Azure API Management through 2025-10-17, when self-service signup (username/password Basic Authentication) is enabled in Tenant A, an attacker can reuse the registr...

CVE-2025-66390

In Microsoft Azure API Management through 2025-10-17, when self-service signup (username/password Basic Authentication)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536...

CVE-2026-8285

Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Exces

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 ...

CVE-2026-8284

URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexCity: fr...

CVE-2026-6792

Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting Incorrectly Configured Access

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing uninten...

CVE-2026-59846

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metachara

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, ...

CVE-2026-16445

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153.

CVE-2026-16410

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153.

CVE-2026-16409

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153.

CVE-2026-16407

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.

CVE-2026-16405

Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153 and Firefox

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-16404

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153.

CVE-2026-16403

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153.

CVE-2026-16402

Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153.

CVE-2026-16401

Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153.

CVE-2026-16400

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153.

CVE-2026-16399

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153.

CVE-2026-16398

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD