2026-08-29 归档

今日共收录 1687 条安全情报,包含 687 个 CVE,604 篇安全通告,以及 114 篇研究论文。

← 返回归档列表
漏洞预警2026-08-28 发布INFO

An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage ...

CVE-2026-33607

An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example du...

CVE-2026-33606

Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode (default for com...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outb...

CVE-2026-33604

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor handling issues. If running in high-sec...

CVE-2026-33263

When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage...

CVE-2026-27852

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresse

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In Eclipse Lyo versions 2.0.0 to 7.0.0, OAuth server authorization checks can be bypassed when the 2-legged auth is supported by the server. In those cases, application that bas...

CVE-2026-18918

In Eclipse Lyo versions 2.0.0 to 7.0.0, OAuth server authorization checks can be bypassed when the 2-legged auth is supp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could...

CVE-2026-18393

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when pro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote ...

CVE-2026-9548

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information.

CVE-2026-9491

A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & Logic.

CVE-2026-82123

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & L

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclock_miscdev_mmap() rejects writable map...

CVE-2026-80724

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becom

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regions are defined On boot, fdt_scan_reserved_mem() sa...

CVE-2026-80723

In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211_process_rx_twt_action() only p...

CVE-2026-80722

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params befo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in iso_conn After iso_conn_del(), ISO sockets should not...

CVE-2026-80721

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already come from...

CVE-2026-80720

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker batches per-generati...

CVE-2026-80719

In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg repa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() In pcpu_create_chunk(), nr_pages is...

CVE-2026-80718

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a ...

CVE-2026-80717

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter leng

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink snd_pcm_drain() on a linked stream parks an on-stack wait en...

CVE-2026-80716

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink snd

历史摘要 · 未重新核验 · NVD