今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表CVE-2026-114354
Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C
CVE-2026-114353
Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware
CVE-2026-112407
Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10
CVE-2026-112344
Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link
CVE-2026-112343
Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to e
CVE-2026-112188
MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sens
CVE-2026-111073
The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics payload against tel
CVE-2026-10632
A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an a
CVE-2026-109682
Metasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to follow redirects to a d
CVE-2026-109681
The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rog
CVE-2026-109411
An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user
CVE-2025-58403
CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data.
CVE-2025-30054
CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with roo
CVE-2025-30053
The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication.
CVE-2025-30052
The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based s
CVE-2025-30051
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials,
CVE-2025-30050
CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified
CVE-2025-30049
The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 a
CVE-2025-30046
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run w
CVE-2025-30045
CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF documen