2026-08-13 归档

今日共收录 1881 条安全情报,包含 959 个 CVE,493 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
漏洞预警2026-08-11 发布INFO

Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System software adv...

CVE-2026-20705

Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Dom

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unaut...

CVE-2026-20702

Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software...

CVE-2026-20349

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Omission of security-relevant information for some Intel(R) Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Aut...

CVE-2025-35987

Omission of security-relevant information for some Intel(R) Software Guard Extensions Data Center Attestation Primitives

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a pr...

CVE-2025-35973

Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized ad...

CVE-2025-31938

Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM ...

CVE-2025-31936

Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to...

CVE-2026-9214

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to ...

CVE-2026-11738

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and function...

CVE-2026-11736

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and...

CVE-2026-11735

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to ma

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service

CVE-2025-15687

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smf_gx_cca_cb of the component SMF

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-12 发布INFO

Open5GS HSS Service fd_msg_sess_get denial of service

CVE-2025-15686

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the com

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-12 发布INFO

Open5GS freeDiameter memory corruption

CVE-2025-15685

A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the componen

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-12 发布INFO

Open5GS CER init.c diam_log_func assertion

CVE-2025-15684

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/com

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-12 发布INFO

Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow

CVE-2024-14044

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pc

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-11 发布INFO

Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow

CVE-2024-14043

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-11 发布INFO

calibre: Bypass of Python template restrictions via nested `template()` leading to RCE

CVE-2026-73248

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-11 发布INFO

libgit2 v0.27.0-v1.9.0 Shell Command Injection via ssh_libssh2 Backend

CVE-2026-5917

libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command inj

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-11 发布INFO

Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth

CVE-2026-73245

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/appli

历史摘要 · 未重新核验 · OSV.dev