2026-07-24 归档

今日共收录 841 条安全情报,包含 0 个 CVE,432 篇安全通告,以及 115 篇研究论文。

← 返回归档列表
安全公告2026-07-24 发布INFO

京ICP证080047号[京ICP备08010314号-6]

该输入为360CERT提供的网站备案信息页面,内容仅包含ICP备案号(京ICP证080047号、京ICP备08010314号-6)及来源链接(https://beian.miit.gov.cn/),不涉及任何安全漏洞、攻击事件或技术细节,无

历史摘要 · 未重新核验 · 360CERT

威胁情报2026-07-24 发布INFO

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-07-24 发布INFO

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

安全公告2026-07-24 发布INFO

Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate...

CVE-2026-56167

Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an...

CVE-2026-49159

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute...

CVE-2026-35425

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information...

CVE-2026-44955

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized contr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile:...

CVE-2026-16767

A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file sr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass...

CVE-2026-65604

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information...

CVE-2026-28698

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized contr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file...

CVE-2026-65694

Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthen

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password...

CVE-2026-40430

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength...

CVE-2026-50044

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker...

CVE-2026-16807

Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to...

CVE-2026-16805

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Cal.com (repository calcom/cal.diy) in versions <= 4.7.15 is vulnerable to cross-site scripting ...

CVE-2024-58353

Cal.com (repository calcom/cal.diy) in versions ). Booking question (form field) labels are rendered via React's dangero

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some...

CVE-2026-16765

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to...

CVE-2026-16806

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting...

CVE-2024-58355

Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected...

CVE-2026-16763

A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown funct

历史摘要 · 未重新核验 · GitHub Advisory