rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block
CVE-2026-53792
rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a ma
2026-08-15 归档
今日共收录 1312 条安全情报，包含 424 个 CVE，492 篇安全通告，以及 116 篇研究论文。
← 返回归档列表rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header
CVE-2026-53791
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to
rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping
CVE-2026-53788
rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allow
rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping
CVE-2026-53798
rsync tbefore 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that a
rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive
CVE-2026-53786
rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-leve
rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync
CVE-2026-53783
rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricte
rsync < 3.5.0 Symlink Following Arbitrary File Overwrite
CVE-2026-53803
rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files b
rsync < 3.5.0 Arbitrary File Read via Symlink Following
CVE-2026-53802
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the r
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-72970
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.s...
CVE-2026-19846
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of
Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by expl...
CVE-2026-73673
Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthentic
A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component...
CVE-2026-19815
A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is the function setParent
A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setMacQos of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Performi...
CVE-2026-19814
A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setMacQos of the file /c
A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the componen...
CVE-2026-19813
A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFil
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the componen...
CVE-2026-19811
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setIp
Critical VMware vCenter RCE flaw exploited for reverse SSH access
CVE-2026-59310
A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an acti
Compatibility Test Suite (CTS)
本次公告来自 Android Security Bulletin，主题为 Compatibility Test Suite (CTS)，即 Android 兼容性测试套件。CTS 是 Google 提供的一套用于验证 Android 设备是
Compatibility Definition Document (CDD)
本公告为 Android 兼容性定义文档（Compatibility Definition Document, CDD）的发布信息。CDD 是 Android 生态中具有规范性约束的技术文档，用于定义一台设备要成为 Android 兼容设备
Tools, build, and related reference
本输入来自Android Security Bulletin，但实际内容为“Tools, build, and related reference”这一构建工具与参考文档页面，且未附带任何安全摘要、漏洞描述、CVE编号、受影响产品明细或修复
Latest Compatibility Definition Document (CDD)
本公告为 Android 兼容性定义文档（Compatibility Definition Document, CDD）的最新版本发布说明，来源为 Android Security Bulletin 官方渠道。CDD 是 Android 生