MFSA 2026-78Security Vulnerabilities fixed in Thunderbird 154
MFSA 2026-78Security Vulnerabilities fixed in Thunderbird 154
2026-08-22 归档
今日共收录 1353 条安全情报，包含 493 个 CVE，458 篇安全通告，以及 108 篇研究论文。
← 返回归档列表MFSA 2026-77Security Vulnerabilities fixed in Firefox ESR 153.1
MFSA 2026-77Security Vulnerabilities fixed in Firefox ESR 153.1
MFSA 2026-76Security Vulnerabilities fixed in Firefox ESR 140.14
MFSA 2026-76Security Vulnerabilities fixed in Firefox ESR 140.14
MFSA 2026-75Security Vulnerabilities fixed in Firefox ESR 115.39
MFSA 2026-75Security Vulnerabilities fixed in Firefox ESR 115.39
MFSA 2026-74Security Vulnerabilities fixed in Firefox 154
MFSA 2026-74Security Vulnerabilities fixed in Firefox 154
【安全通告】Redis 远程代码执行漏洞风险通告
【安全通告】Redis 远程代码执行漏洞风险通告
【大模型服务平台 TokenHub】服务条款更新及《第三方部署模型服务特别说明》上线通知
【大模型服务平台 TokenHub】服务条款更新及《第三方部署模型服务特别说明》上线通知
Chrome Beta for Desktop Update
The Chrome team is excited to announce the promotion of Chrome 153 to the Beta channel for Windows, Mac and Linux. Chrom
【TDSQL-C MySQL 版】数据库故障隐患规避公告
【TDSQL-C MySQL 版】数据库故障隐患规避公告
Chrome Dev for Desktop Update
The Dev channel has been updated to 154.0.8013.2 for Windows, Mac and Linux.A partial list of changes is available in th
xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to upload executable fi...
CVE-2026-49849
xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allo
GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerabil...
CVE-2026-76904
GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to v
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream...
CVE-2026-62283
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 t
Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eva...
CVE-2026-61539
Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To ...
CVE-2026-77810
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties i
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/{session_id}/agent checks LEVEL_EDIT permission for...
CVE-2026-62674
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /ses
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69502
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a ne
Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a ...
CVE-2026-77087
Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbit
Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a `metadata.yaml` symlink pointing to an arbitrary host path allows...
CVE-2026-63343
Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a `metadat
Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with `can_create_ima...
CVE-2026-63125
Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus