Firewall for AI
Firewall for AI
2026-07-24 归档
今日共收录 841 条安全情报，包含 0 个 CVE，432 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack
Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breachi
Microsoft working to fix Exchange Online mailbox quarantine issue
Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers' mailbo
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code...
CVE-2026-56165
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over...
CVE-2026-54120
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a...
CVE-2026-58275
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code...
CVE-2026-50517
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges...
CVE-2026-62825
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate...
CVE-2026-56160
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a netwo
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary...
CVE-2026-42933
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow
cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover...
CVE-2024-58354
cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover vulnerability in its GitHub Acti
Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution...
CVE-2025-71389
Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a versio
h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API...
CVE-2026-65700
h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthentica
SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal...
CVE-2026-65701
SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inf
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote...
CVE-2026-6516
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the
Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools...
CVE-2026-65698
Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjace
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home...
CVE-2026-48535
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configurati
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server...
CVE-2026-48534
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that all
Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypass...
CVE-2026-15616
Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypass second-factor requirem
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File...
CVE-2026-48532
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy conf