GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could hav...

CVE-2026-15423

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 1

历史摘要 · 未重新核验 · NVD

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/com...

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearc

历史摘要 · 未重新核验 · NVD

Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users a...

CVE-2026-73239

Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura.

历史摘要 · 未重新核验 · NVD

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An attacker can supply m...

CVE-2026-48551

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a sel

历史摘要 · 未重新核验 · NVD

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.

CVE-2026-18499

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using

历史摘要 · 未重新核验 · NVD

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser.

CVE-2026-18246

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an inter

历史摘要 · 未重新核验 · NVD

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to unsafe reflection.

CVE-2026-17095

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to unsafe r

历史摘要 · 未重新核验 · NVD

An authenticated user without repository read permission may access package metadata under specific conditions.

CVE-2026-70547

An authenticated user without repository read permission may access package metadata under specific conditions.

历史摘要 · 未重新核验 · NVD

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.

CVE-2026-69105

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affe

历史摘要 · 未重新核验 · NVD

Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target D...

CVE-2026-68971

Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check

历史摘要 · 未重新核验 · NVD

Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH /api/v2/variables`...

CVE-2026-68969

Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submit

历史摘要 · 未重新核验 · NVD

Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse. The authorization dependency ...

CVE-2026-68968

Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` pa

历史摘要 · 未重新核验 · NVD

Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because `Sy...

CVE-2026-67587

Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports

历史摘要 · 未重新核验 · NVD

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root.

CVE-2026-65939

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arb

历史摘要 · 未重新核验 · NVD

In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content.

CVE-2026-65937

In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject per

历史摘要 · 未重新核验 · NVD

Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an administrator has enabled multi-team mode and exposed the ...

CVE-2026-65017

Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an a

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

该公告为第四届阿里CTF安全挑战赛的决赛直播宣传，由阿里云先知社区发布。阿里CTF是面向全球安全研究者和白帽黑客的网络安全竞赛，旨在通过实战化的攻防挑战提升参与者的漏洞挖掘、二进制分析、Web渗透等技能。文章本身只包含活动的时间与观看入口等

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本文为阿里云发布的一则校园招聘信息，面向2027届毕业生招聘实习生，旨在吸引加入AI时代的安全团队。文章发布于阿里云先知社区，内容以招聘宣传为主，不涉及任何漏洞、攻击活动、恶意软件或威胁情报信息。由于本质上属于人力资源活动，不构成安全威胁事

历史摘要 · 未重新核验 · 先知社区

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research