2026-10-31 归档

今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-22 发布HIGH

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote authenticated attacker can exploit this via CRLF sequence...

CVE-2026-114720

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote

来源摘录 · NVD

#cve #cwe-93

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() aie2_populate_range() jumps back to th...

CVE-2026-63873

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mm_struct reference leak in aie2

来源摘录 · NVD

#cve #cwe-401

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When huge_pmd_unshare() is called to unshare a PMD t...

CVE-2026-63875

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tab

来源摘录 · NVD

#cve #cwe-459 #cwe-670

漏洞预警2026-10-22 发布MEDIUM

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin read the _uid para...

CVE-2026-114719

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk actio

来源摘录 · NVD

#cve #cwe-352

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rx_retry cancellation It's possible that sequencing bet...

CVE-2026-63874

In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevent a crash from happening as the first serial port is ini...

CVE-2026-63876

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Preve

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is ini...

CVE-2026-63877

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Preve

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO kvcalloc(args->num_entries, sizeof(*vm_entries), G...

CVE-2026-63878

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check num_entries in GEM_OP GET_MAPPING

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO The AMDGPU_GEM_OP_GET_MAPPING_INFO br...

CVE-2026-63880

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_O

来源摘录 · NVD

#cve #cwe-667

漏洞预警2024-07-16 发布HIGH

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. When a user installs a package in dbt...

CVE-2024-40637

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to

来源摘录 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the s...

CVE-2026-63897

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix missing interrupt-in tra

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix memory corruption with small endpoint The driver overrides the maximum transfer ...

CVE-2026-63898

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix memory corruption with s

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max pa...

CVE-2026-63899

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with sm

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of u...

CVE-2026-63900

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sa

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer si...

CVE-2026-63901

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: validate interrupt packet headers cypress_read_int_callback() parses the interrupt...

CVE-2026-63902

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: validate interrupt packet

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkin_sa: validate interrupt status length The Belkin interrupt callback treats interrupt dat...

CVE-2026-63903

In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkin_sa: validate interrupt status l

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: check URB actual_length for interrupt-IN notifications USBTMC devices can use an optional inte...

CVE-2026-63904

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: check URB actual_length for interrupt-

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: Fix use after free bug in vudc_remove due to race condition This patch follows up Zheng Wang's...

CVE-2026-63905

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: Fix use after free bug in vudc_remove

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430_probe() In omap2430_probe(), of_node_put(np) is called ...

CVE-2026-63906

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430

来源摘录 · NVD

#cve #cwe-416