2026-08-11 归档

今日共收录 1506 条安全情报，包含 770 个 CVE，368 篇安全通告，以及 83 篇研究论文。

漏洞预警2026-08-10 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, settings.readTraefikFile in apps/dokploy/server/api/routers/settings.ts passes a path accepted b...

CVE-2026-72875

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, settings.readTraefikFile in apps/dokplo

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-10 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, application.one in apps/dokploy/server/api/routers/application.ts returns provider relations loa...

CVE-2026-72873

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, application.one in apps/dokploy/server/

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-10 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.28.7 until 0.29.13, the server.remove tRPC mutation in apps/dokploy/server/api/routers/server.ts accepts a ...

CVE-2026-72734

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.28.7 until 0.29.13, the server.remove tRPC mutatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-10 发布INFO

CTI-Transmute is affected by a stored cross-site scripting (XSS) vulnerability in the conversion graph used to visualise converted MISP and STIX content. Attacker-controlled va...

CVE-2026-72751

CTI-Transmute is affected by a stored cross-site scripting (XSS) vulnerability in the conversion graph used to visualise

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: cap received transmit credits The interrupt-status packet reports transmit credit...

CVE-2026-68365

In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: cap received transmit cre

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnet_frag_new() keeps a sorted list of received fragment...

CVE-2026-68354

In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocation Lockdep complains: [ 259.410489] =================...

CVE-2026-68347

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocatio

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ovpn: avoid putting unrelated P2P peer on socket release ovpn_peer_release_p2p() is called when an OVPN UDP...

CVE-2026-68342

In the Linux kernel, the following vulnerability has been resolved: ovpn: avoid putting unrelated P2P peer on socket re

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix use after free in unlock_ovpn() unlock_ovpn() iterates over the release_list using llist_for_each...

CVE-2026-68341

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix use after free in unlock_ovpn() unlock_o

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset pre_reset only force-completes fences of MAPPE...

CVE-2026-68237

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ublk: wait on ublk_dev_ready() instead of ub->completion ub->completion is only re-armed by a successful ST...

CVE-2026-68173

In the Linux kernel, the following vulnerability has been resolved: ublk: wait on ublk_dev_ready() instead of ub->compl

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths When either the TCP RX or TX error path calls ovpn_peer_hol...

CVE-2026-68122

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths Wh

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-10 发布INFO

A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange. When an administrator configures M2M role mappings, the system uses unanchored regular...

CVE-2026-19278

A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange. When an administrator configu

历史摘要 · 未重新核验 · NVD

#cve #cwe-625

漏洞预警2026-08-10 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when collapsing [There is no upstream commit, as this code was r...

CVE-2026-68086

In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when col

历史摘要 · 未重新核验 · NVD

#cve

安全公告2026-08-11 发布INFO

Compatibility Test Suite (CTS)

本公告来自 Android Security Bulletin，内容指向 Compatibility Test Suite (CTS)，即安卓兼容性测试套件。CTS 是 Google 提供的一套自动化测试工具，用于验证 Android 设备