2026-08-14 归档

今日共收录 1589 条安全情报，包含 784 个 CVE，406 篇安全通告，以及 115 篇研究论文。

漏洞预警2026-08-13 发布INFO

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when...

CVE-2026-70460

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module roo

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

漏洞预警2026-08-13 发布INFO

rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list wh...

CVE-2026-70459

rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remot

历史摘要 · 未重新核验 · NVD

#cve #cwe-908

漏洞预警2026-08-13 发布INFO

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_...

CVE-2026-70458

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by trigge

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-13 发布INFO

rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an index into a .bss-segment array without ...

CVE-2026-70457

rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is use

历史摘要 · 未重新核验 · NVD

#cve #cwe-131 #cwe-787

漏洞预警2026-08-13 发布INFO

rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a cr...

CVE-2026-70456

rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicio

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-08-13 发布INFO

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias for --compress-thr...

CVE-2026-70455

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resour

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-13 发布INFO

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept...

CVE-2026-70454

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-08-13 发布INFO

rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote attacker to cause a denial of service by delivering a care...

CVE-2026-70453

rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote a

历史摘要 · 未重新核验 · NVD

#cve #cwe-407

漏洞预警2026-08-13 发布INFO

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during h...

CVE-2026-70452

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent host

历史摘要 · 未重新核验 · NVD

#cve #cwe-636 #cwe-863

漏洞预警2026-08-13 发布INFO

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.

CVE-2026-6387

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-290

漏洞预警2026-08-13 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summa...

CVE-2026-68454

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-13 发布INFO

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Add validation of both the actual key buffer size a...

CVE-2026-68453

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2pro

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-13 发布INFO

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives the copy length f...

CVE-2026-68452

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-13 发布INFO

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for...

CVE-2026-68451

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private ke

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-13 发布INFO

UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Sh...

CVE-2026-66256

** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects A

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-13 发布INFO

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.

CVE-2026-65936

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information

历史摘要 · 未重新核验 · NVD

#cve #cwe-126

漏洞预警2026-08-13 发布INFO

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.

CVE-2026-65935

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key v

历史摘要 · 未重新核验 · NVD

#cve #cwe-305

漏洞预警2026-08-13 发布INFO

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below.

CVE-2026-65934

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E

历史摘要 · 未重新核验 · NVD

#cve #cwe-440

漏洞预警2026-08-13 发布INFO

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.

CVE-2026-65933

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vuln

历史摘要 · 未重新核验 · NVD

#cve #cwe-126

漏洞预警2026-08-13 发布INFO

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper...

CVE-2026-65932

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denia

历史摘要 · 未重新核验 · NVD

#cve #cwe-440