2026-07-29 归档

今日共收录 1422 条安全情报,包含 510 个 CVE,504 篇安全通告,以及 114 篇研究论文。

← 返回归档列表
安全公告2026-07-28 发布INFO

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session...

CVE-2026-14996

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS...

CVE-2026-13442

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to...

CVE-2026-14974

IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

Tanium addressed a SQL injection vulnerability in Patch.

CVE-2026-11391

Tanium addressed a SQL injection vulnerability in Patch.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming...

CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol me

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the...

CVE-2026-57510

SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

When applying replicated changes for a row that is missing one or more columns, pglogical...

CVE-2026-50737

When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a...

CVE-2026-50736

The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscrib

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of...

CVE-2026-16192

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability wh

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure...

CVE-2026-50738

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced aft

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass...

CVE-2026-16184

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafte

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

IBM TS4500 CLI tool Versions:  0.1.31 through 1.12.0.0 does not validate or improperly validates...

CVE-2026-16107

IBM TS4500 CLI tool Versions:  0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow...

CVE-2026-4932

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in...

CVE-2026-5114

The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path...

CVE-2026-48374

Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code...

CVE-2026-48395

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code...

CVE-2026-48391

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...

CVE-2026-48394

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side...

CVE-2026-4912

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...

CVE-2026-48393

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

历史摘要 · 未重新核验 · GitHub Advisory