2026-07-29 归档

今日共收录 1422 条安全情报，包含 510 个 CVE，504 篇安全通告，以及 114 篇研究论文。

← 返回归档列表

漏洞预警2026-07-28 发布INFO

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchr...

CVE-2026-62429

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cl

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-07-28 发布INFO

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the ref...

CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl and platform opera...

CVE-2026-62427

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-305

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl and platform opera...

CVE-2026-62426

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-412 #cwe-667

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-62425

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-62424

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-62423

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-07-28 发布INFO

A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys (X-Forwarded-User) but does not strip underscore-variant ke...

CVE-2026-49332

A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys (X

历史摘要 · 未重新核验 · NVD

#cve #cwe-436

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-42495

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-42494

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-07-28 发布INFO

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternat...

CVE-2026-42493

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-07-28 发布INFO

Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To make this more robust, a new XEN_DOMCTL_get_domain_state w...

CVE-2026-42492

Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To m

历史摘要 · 未重新核验 · NVD

#cve #cwe-459

漏洞预警2026-07-28 发布INFO

Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication de...

CVE-2026-41874

Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with acces

历史摘要 · 未重新核验 · NVD

#cve #cwe-256

漏洞预警2026-07-28 发布INFO

A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. By appending a tra...

CVE-2026-18047

A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching fo

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-07-28 发布INFO

A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function ExecTool.Execute of the file goclaw/internal/http/tools_invoke.go o...

CVE-2026-18038

A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function ExecTool.E

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-07-28 发布INFO

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'postMe...

CVE-2026-15393

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-28 发布INFO

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field...

CVE-2026-15016

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerab

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-28 发布INFO

Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. (version used at Resurrection Fest 2025)...

CVE-2026-4648

Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tec

历史摘要 · 未重新核验 · NVD

#cve #cwe-326

漏洞预警2026-07-28 发布INFO

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.

CVE-2026-21047

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitra

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-07-28 发布INFO

The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via the wpcs_send_email() AJAX handler. This is due to the wpcs_s...

CVE-2026-16774

The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via the

历史摘要 · 未重新核验 · NVD

#cve #cwe-862