2026-10-30 归档

今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。

漏洞预警2026-07-08 发布MEDIUM

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memor...

CVE-2026-56362

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-06-30 发布HIGH

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providi...

CVE-2026-56361

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer rea

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-06-17 发布HIGH

Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly validate the Host header during stathost detection, allowing unauthenticated attackers to access the stats p...

CVE-2026-55202

Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly validate the Host header during stathost detection,

来源摘录 · NVD

#cve #cwe-290

漏洞预警2026-07-09 发布MEDIUM

The Tag plugin for GLPI 11 before 2.14.4 stores the tag name without HTML sanitization and renders it into the Kanban badge markup via PluginTagTag::preKanbanContent() without o...

CVE-2026-53987

The Tag plugin for GLPI 11 before 2.14.4 stores the tag name without HTML sanitization and renders it into the Kanban ba

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-05-27 发布MEDIUM

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SV...

CVE-2026-47119

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arb

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-05-26 发布MEDIUM

libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head defaul...

CVE-2026-41401

libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly up

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-04-09 发布HIGH

OpenClaw before 2026.3.24 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containmen...

CVE-2026-35632

OpenClaw before 2026.3.24 contains a symlink traversal vulnerability in agents.create and agents.update handlers that us

来源摘录 · NVD

#cve #cwe-61

漏洞预警2026-01-07 发布INFO

OpenLDAP Lightning Memory-Mapped Database (LMDB) versions 0.9.14 before 0.9.34, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. ...

CVE-2026-22185

OpenLDAP Lightning Memory-Mapped Database (LMDB) versions 0.9.14 before 0.9.34, prior to commit 8e1fda8, contain a heap

来源摘录 · NVD

#cve #cwe-125 #cwe-191

漏洞预警2026-10-29 发布MEDIUM