JupyterLab before 4.5.9 Stored XSS via Extension Manager
CVE-2026-67338
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to vali
2026-08-02 归档
今日共收录 946 条安全情报，包含 146 个 CVE，466 篇安全通告，以及 75 篇研究论文。
← 返回归档列表guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service
CVE-2026-67353
guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimit
guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure
CVE-2026-67339
guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cUR
GitPython before 3.1.52 Environment Variable Exfiltration via clone_from
CVE-2026-67322
GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). The caller-supplied rem
FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy
CVE-2026-67301
FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC an
GitPython before 3.1.51 Command Injection via option prefix abbreviation
CVE-2026-67325
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option p
FreeRDP before 3.29.0 Improper Certificate Hostname Validation
CVE-2026-67293
FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability.
ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers
CVE-2026-67342
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, P
FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr
CVE-2026-67305
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when
better-auth before 1.4.0 Session Revocation via Forged Cookie
CVE-2025-71402
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-ou
FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF
CVE-2026-67290
FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP
CVE-2026-18536
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource:
Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.56 - Authenticated (Administrator+) Local File Inclusion via Payment Form 'type' Element Field
CVE-2026-17605
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Incl
Compatibility Test Suite (CTS)
本次输入为 Android 官方文档页面《Compatibility Test Suite (CTS)》的链接，发布日期为 2026-08-02。该页面主要用于介绍 Android 兼容性测试套件，帮助设备制造商和开发者验证其设备是否符合
Compatibility Definition Document (CDD)
本输入来自 Android Security Bulletin 官方源，内容指向 Android Compatibility Definition Document (CDD，兼容性定义文档)。CDD 是 Android 生态中定义设备兼容
Tools, build, and related reference
该输入来源于 Android Security Bulletin 源，但标题为 “Tools, build, and related reference”，链接指向 https://source.android.com/docs/setup
Latest Compatibility Definition Document (CDD)
本公告为 Android 兼容性定义文档（CDD）的更新，而非安全漏洞公告。CDD 是 Android 生态系统中定义设备必须满足的软硬件兼容性要求的权威文档，涵盖安全模型、权限、加密、内核接口、应用运行时等核心规范。该文档更新通常用于跟进
Latest security bulletins
本公告为 Android 安全公告（Android Security Bulletin）的最新汇总页面。该页面于 2026 年 8 月 2 日更新，由 Android 官方发布，旨在向 Android 生态系统的用户、开发者和安全运维人员提
update the software on your Mac
苹果官方通过安全公告页面发布了一则面向 Mac 用户的通用安全提醒，标题为“update the software on your Mac”（更新您的 Mac 软件）。该公告未附带具体的 CVE 编号、受影响产品列表、漏洞技术细节或严重性评
update the software on your iPhone or iPad
Apple Security Releases 于 2026 年 8 月 2 日发布了一则安全公告，标题为“update the software on your iPhone or iPad”，即建议用户更新 iPhone 或 iPad