Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in...

CVE-2026-73457

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI)

历史摘要 · 未重新核验 · NVD

On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user...

CVE-2026-73442

On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged i

历史摘要 · 未重新核验 · NVD

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly/cli 2.33.2, the split command constructs output paths under --outDir from un...

CVE-2026-63225

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly/cli 2.33.2, the spl

历史摘要 · 未重新核验 · NVD

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suric...

CVE-2026-46352

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

历史摘要 · 未重新核验 · NVD

IRIS through 2.4.29 fails to properly validate case authorization in comment listing endpoints for notes, tasks, IOCs, assets, and evidence items. Attackers with access to any s...

CVE-2026-92605

IRIS through 2.4.29 fails to properly validate case authorization in comment listing endpoints for notes, tasks, IOCs, a

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smf_n4_handle_session_report_request of the file src/smf/n4-handler.c of the compon...

CVE-2026-92416

A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smf_n4_handle_session_repo

历史摘要 · 未重新核验 · NVD

Concrete CMS before 9.5.4 re-authorized OAuth REST API requests from the bearer token alone and did not re-check the state of the account the token had been issued to. The resou...

CVE-2026-85387

Concrete CMS before 9.5.4 re-authorized OAuth REST API requests from the bearer token alone and did not re-check the sta

历史摘要 · 未重新核验 · NVD

SIMAC MyPHR 1.1 contains an insecure direct object reference (IDOR) vulnerability that allows authenticated attackers to access and modify arbitrary employee records due to miss...

CVE-2026-47094

SIMAC MyPHR 1.1 contains an insecure direct object reference (IDOR) vulnerability that allows authenticated attackers to

历史摘要 · 未重新核验 · NVD

Concrete CMS before 9.5.3 exposed a legacy Express entry search endpoint that returned entry result JSON without invoking the canViewExpressEntries() permission check applied by...

CVE-2026-18120

Concrete CMS before 9.5.3 exposed a legacy Express entry search endpoint that returned entry result JSON without invokin

历史摘要 · 未重新核验 · NVD

Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysUser/detail and /sysUser/page endpoints omit requiredPermission configuration,...

CVE-2026-92600

Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysUser/detail and /sysU

历史摘要 · 未重新核验 · NVD

n Concrete CMS 9.2.0 through 9.5.3, the REST API user creation endpoint (POST /ccm/api/1.0/users, the add() method of concrete/src/Api/Controller/Users.php) did not perform a pe...

CVE-2026-87031

n Concrete CMS 9.2.0 through 9.5.3, the REST API user creation endpoint (POST /ccm/api/1.0/users, the add() method of co

历史摘要 · 未重新核验 · NVD

Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged to the board instance the requesting user was autho...

CVE-2026-87028

Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint bel

历史摘要 · 未重新核验 · NVD

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit...

CVE-2026-86359

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privile

历史摘要 · 未重新核验 · NVD

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could p...

CVE-2026-86358

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unau

历史摘要 · 未重新核验 · NVD

Concrete CMS before 9.5.4 did not sanitize XML and XSLT documents uploaded through a public Form Block file-upload question. Plain XML uploads were validated by file extension o...

CVE-2026-85386

Concrete CMS before 9.5.4 did not sanitize XML and XSLT documents uploaded through a public Form Block file-upload quest

历史摘要 · 未重新核验 · NVD

Concrete CMS below 9.5.4 did not validate the user timezone value (uTimezone) on write and rendered it without output encoding on the Dashboard user management page, where Date:...

CVE-2026-85385

Concrete CMS below 9.5.4 did not validate the user timezone value (uTimezone) on write and rendered it without output en

历史摘要 · 未重新核验 · NVD

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该文是先知社区（阿里云安全社区）发布的一则招聘公告，标题为《抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！》，发布于 2026-09-18。文章内容属于企业与社区的人才招募信息，面向 2027 届毕业生开放阿里云安全团队实习

历史摘要 · 未重新核验 · 先知社区

[原创 附源码 Prompt！手把手教你用 AI 自动化还原 VMP 字节码（含实战案例）

[原创 附源码 Prompt！手把手教你用 AI 自动化还原 VMP 字节码（含实战案例）

历史摘要 · 未重新核验 · 看雪

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research

See all Cybersecurity

See all Cybersecurity

历史摘要 · 未重新核验 · Akamai Security Research