2026-08-11 归档

今日共收录 1506 条安全情报，包含 770 个 CVE，368 篇安全通告，以及 83 篇研究论文。

← 返回归档列表

漏洞预警2026-08-10 发布INFO

A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `....

CVE-2026-59090

A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem`

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-08-10 发布INFO

Jenkins FilePath.untarFrom() in all versions, including those with the CVE-2026-33001 patch applied, validates symlink destinations but not targets. The CVE-2026-33001 fix enfor...

CVE-2026-19429

Jenkins FilePath.untarFrom() in all versions, including those with the CVE-2026-33001 patch applied, validates symlink d

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-08-10 发布INFO

entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buffer using malloc(ARG_MAX) and copies command-line argumen...

CVE-2026-18370

entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buf

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-08-10 发布INFO

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 20072026.

CVE-2026-12984

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before usage Teddy reported that a XEN HVM has a long boot delay...

CVE-2026-68092

In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before u

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware be...

CVE-2026-68091

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe fa

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM disable syzbot reported a puzzling splat: WARNING: ker...

CVE-2026-68090

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM di

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero then simple_write_to_buffer() will not in...

CVE-2026-68089

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *p

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength...

CVE-2026-68088

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to r

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush() wacom_wac_queue_flush() is called via the .raw_event ...

CVE-2026-68087

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled HCI_UART_SENDING bit in tx_state me...

CVE-2026-68085

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: clear HCI_UART_SENDING when wr

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi148 bridge tsi148_probe() allocates a location monitor r...

CVE-2026-68084

In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbd_vfs_kern_path_create The SMB2 open lookup is rooted at the share with L...

CVE-2026-68083

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbd_vfs_kern_path_c

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacke...

CVE-2026-64941

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-10 发布INFO

A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation du...

CVE-2026-59088

A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI im

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-10 发布INFO

A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the applica...

CVE-2026-72594

A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authentic

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-10 发布INFO

A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or ...

CVE-2026-72591

A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make t

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-10 发布INFO

A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to determine whether a given email address is registered. The...

CVE-2026-72588

A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to d

历史摘要 · 未重新核验 · NVD

#cve #cwe-204

漏洞预警2026-08-10 发布INFO

A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the...

CVE-2026-72587

A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-08-10 发布INFO

A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all historical sensor data via the DAQ_QUERY Socket.IO...

CVE-2026-72586

A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to que

历史摘要 · 未重新核验 · NVD

#cve #cwe-306