2026-07-28 归档

今日共收录 1224 条安全情报,包含 453 个 CVE,382 篇安全通告,以及 98 篇研究论文。

← 返回归档列表
漏洞预警2026-07-27 发布INFO

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote co...

CVE-2026-59250

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corru

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_incomple...

CVE-2026-58227

The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary...

CVE-2026-55737

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation...

CVE-2026-54890

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3ExprLis...

CVE-2026-51304

sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The affected code first rel

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, an...

CVE-2026-51302

SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the...

CVE-2026-51300

A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoki

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree(), the program still accesses internal mem...

CVE-2026-51298

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory a...

CVE-2026-51297

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still calls jsonLookupStep ...

CVE-2026-51296

SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 ...

CVE-2026-47078

Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside the intended extrac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Dae...

CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the ...

CVE-2026-17574

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to...

CVE-2026-17573

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted...

CVE-2026-17572

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function _build_handoff_toolset of the file AstrBot/astrbot/core/a...

CVE-2026-17530

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astr_main_agent.py. The manipulation of the argument...

CVE-2026-17529

A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Unauthenticated Broken Access Control in Gillion <= 4.13 versions.

CVE-2026-66477

Unauthenticated Broken Access Control in Gillion <= 4.13 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions.

CVE-2026-66476

Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce &#8211; Checkout Manager <= 3.0.5 versions.

CVE-2026-66475

Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce &#8211; Checkout Manager <= 3.0.5 versi

历史摘要 · 未重新核验 · NVD