2026-07-30 归档

今日共收录 1598 条安全情报,包含 743 个 CVE,444 篇安全通告,以及 115 篇研究论文。

← 返回归档列表
漏洞预警2026-07-30 发布INFO

Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c...

CVE-2026-17653

Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the rendere

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a ...

CVE-2026-17652

Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the render

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a cra...

CVE-2026-17651

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape ...

CVE-2026-17650

Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file i...

CVE-2026-64685

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JN...

CVE-2026-62946

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operat...

CVE-2026-62363

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid...

CVE-2026-62343

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-16339

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing rem...

CVE-2026-67595

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been re...

CVE-2026-18060

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0,...

CVE-2026-15157

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type he

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to be...

CVE-2026-14643

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or priva

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.

CVE-2025-69949

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters em

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

CVE-2025-69945

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter.

CVE-2025-69944

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the vie

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid.

CVE-2025-69943

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1.

CVE-2025-69942

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /save_user.php via the parameter status.

CVE-2025-67408

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /save_user.php via the parameter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters fname and student_class.

CVE-2025-67407

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters

历史摘要 · 未重新核验 · NVD