2026-07-23 归档

今日共收录 1422 条安全情报，包含 546 个 CVE，469 篇安全通告，以及 113 篇研究论文。

漏洞预警2026-07-21 发布INFO

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `buildRow()` method in `fogpage.class....

CVE-2026-47689

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-21 发布INFO

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `clearAES` and `clearPMTasks` methods ...

CVE-2026-47688

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-07-21 发布INFO

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `selectForm()` helper in `fogpage.clas...

CVE-2026-47687

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-21 发布INFO

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the unauthenticated inventory service endp...

CVE-2026-47685

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-21 发布INFO

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official mani...

CVE-2026-47237

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to versio

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-07-21 发布INFO

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcod...

CVE-2026-47143

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMR

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-07-21 发布INFO

FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Request Forgery (SSRF) vulnerability in get_image_info() all...

CVE-2026-46556

FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Req

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-07-21 发布INFO

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow (out-of-bounds READ) exists in `decoder_context::decode_...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-07-21 发布INFO

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools.

CVE-2026-30633

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-21 发布INFO

The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc instead of s2n_realloc to store the peer's transport parameters. When a TLS 1.3 connection ...

CVE-2026-16318

The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc instead of s2n_realloc to store th

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-07-21 发布INFO

Missing validation of the outer content_type byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-middle to silently discard individual application data reco...

CVE-2026-16317

Missing validation of the outer content_type byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-mi

历史摘要 · 未重新核验 · NVD

#cve #cwe-354

漏洞预警2026-07-21 发布INFO

Tanium addressed an information disclosure vulnerability in Connect.

CVE-2026-12139

Tanium addressed an information disclosure vulnerability in Connect.

历史摘要 · 未重新核验 · NVD

#cve #cwe-214

漏洞预警2026-07-21 发布INFO

Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.

CVE-2026-11925

Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.

历史摘要 · 未重新核验 · NVD

#cve #cwe-451

漏洞预警2026-07-21 发布INFO

Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in dsu.h with...

CVE-2026-65069

Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-732

漏洞预警2026-07-21 发布INFO

Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in sphash.h w...

CVE-2026-65068

Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-732

漏洞预警2026-07-21 发布INFO

Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in intern.h with o...

CVE-2026-65067

Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-732

漏洞预警2026-07-21 发布INFO

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in ring.h with...

CVE-2026-65066

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_E

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-732

漏洞预警2026-07-21 发布INFO

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in roaring....

CVE-2026-65065

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-732

漏洞预警2026-07-21 发布INFO

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in shm_generic.h ...

CVE-2026-65064

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-732

漏洞预警2026-07-21 发布INFO

Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in radix.h with...

CVE-2026-65063

Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EX

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-732