2026-08-13 归档

今日共收录 1881 条安全情报,包含 959 个 CVE,493 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
漏洞预警2026-08-12 发布INFO

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.

CVE-2026-66381

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.

CVE-2026-66380

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

An authenticated user may view private Puppet module metadata without repository read access.

CVE-2026-66379

An authenticated user may view private Puppet module metadata without repository read access.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

An authenticated user without repository read permission may access private NuGet metadata under specific conditions.

CVE-2026-66378

An authenticated user without repository read permission may access private NuGet metadata under specific conditions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

An unauthenticated user may access restricted repository information under specific conditions.

CVE-2026-66377

An unauthenticated user may access restricted repository information under specific conditions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Credentials for a deleted user may remain valid for a short period under specific conditions.

CVE-2026-66376

Credentials for a deleted user may remain valid for a short period under specific conditions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.

CVE-2026-66375

A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this...

CVE-2026-49349

regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvert

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack...

CVE-2026-49262

In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full cookie values and `Session::start()`...

CVE-2026-47234

Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `case 'item_delete':` in `modules/inventory.php`. The same...

CVE-2026-47233

Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an...

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modif...

CVE-2026-14478

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.

CVE-2025-59324

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and ...

CVE-2025-59323

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partition

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.

CVE-2025-59322

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an ...

CVE-2025-59321

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the syst

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access ...

CVE-2025-59320

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded t...

CVE-2025-59319

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary...

CVE-2026-67285

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An u

历史摘要 · 未重新核验 · NVD