2026-08-29 归档

今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。

← 返回归档列表

漏洞预警2026-08-28 发布INFO

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.

CVE-2026-82222

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue af

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-08-28 发布INFO

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents be...

CVE-2026-42007

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their desti...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced co

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller mtk_handle_irq_rx expects a st...

CVE-2026-80694

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the allocated array idpf_get_reg_intr_vecs() fills the caller...

CVE-2026-80693

In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the a

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on fai...

CVE-2026-80684

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV alloca

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header after route_shortcircuit() Before route_shortcircuit(), the eth header pointer i...

CVE-2026-80681

In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header after route_shortcircuit

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden the validator A base inode's $ATTRIBUTE_LIST is sanity-c...

CVE-2026-80674

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() When resolving an attribute lo...

CVE-2026-80673

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy, and BUG_ON register_pid() has several issues when processi...

CVE-2026-80671

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy, an

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_cpu_topology() in machineresolve() machineresolve() accesses env->cpu[al-...

CVE-2026-80670

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_cpu_topology() in mac

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use conntrack GC to reap expectations This patch replaces the timer API by ...

CVE-2026-80668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use conntrack GC to

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag The DEV_PATH_BR_VLAN_UNTAG case post-...

CVE-2026-80634

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num_encaps underflow on

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Whenever f...

CVE-2026-80630

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_red

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size foe_check_time is declared as u16 pointer but was allocated...

CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size fo

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information bet...

CVE-2026-80612

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsu

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[] Move index check before element access.

CVE-2026-80609

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[]

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read parse_dcc() treats data_end as an inclusiv...

CVE-2026-80603

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskb_may_pull() called by batadv_get_vid(...

CVE-2026-80600

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after s

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege.

CVE-2026-78032

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with

历史摘要 · 未重新核验 · NVD

#cve #cwe-502