2026-07-29 归档

今日共收录 1422 条安全情报,包含 510 个 CVE,504 篇安全通告,以及 114 篇研究论文。

← 返回归档列表
漏洞预警2026-07-28 发布INFO

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled.

CVE-2026-16192

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request.

CVE-2026-16184

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

IBM TS4500 CLI tool Versions:  0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive in...

CVE-2026-16107

IBM TS4500 CLI tool Versions:  0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Tanium addressed a SQL injection vulnerability in Patch.

CVE-2026-11391

Tanium addressed a SQL injection vulnerability in Patch.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability that allows unauthenticated attackers to hijack administra...

CVE-2026-66745

Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.3.8. This is due to a mismatch between CSS U...

CVE-2026-5114

The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17,...

CVE-2026-59932

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during ...

CVE-2026-50738

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced aft

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber. Because the apply...

CVE-2026-50737

When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the pr...

CVE-2026-50736

The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscrib

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds...

CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol me

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardw...

CVE-2026-4932

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.3. This is due to the `get_u...

CVE-2026-4912

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this v...

CVE-2026-48396

Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vul...

CVE-2026-48395

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires ...

CVE-2026-48394

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires ...

CVE-2026-48393

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires ...

CVE-2026-48392

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could ex...

CVE-2026-48391

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read...

CVE-2026-48390

Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker co

历史摘要 · 未重新核验 · NVD