#advisory

共收录 23530 条相关情报。

← 返回所有主题
安全公告2026-08-06 发布INFO

OpenReception's tenant detail endpoint discloses live PostgreSQL connection string, superuser-scoped in the tested official deployment

CVE-2026-48080

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

Insecure direct object reference in Strands Agents Tools memory tool namespace isolation

CVE-2026-19111

Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands Ag

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

GitHub CLI: Unescaped variable components in request URLs could allow path traversal

CVE-2026-64653

GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable pat

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

GitHub CLI: Partial token disclosure in `gh auth status` output

CVE-2026-64652

GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characte

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

x86/bugs: Make Safe-RET robust against interrupt injection

CVE-2026-68480

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt in

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

sysPass FileBackupService Authenticated OS Command Injection via Backup Path

CVE-2026-63725

sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php around line 388 builds a ta

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

Insufficient verification of lifetime-deal redemption codes allows forgery of permanent paid subscriptions

CVE-2026-19127

An issue in the billing and license activation subsystem allows remote attackers to bypass payment authorization workflo

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index

CVE-2026-70635

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authentica

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iterator

CVE-2026-70634

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression revers

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iterator

CVE-2026-70633

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compres

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

CVE-2026-71327

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef

CVE-2026-71325

Traefik is an open-source edge router that makes publishing services a fun and easy experience. Prior to 2.11.54, 3.6.25

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool

CVE-2026-71324

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.53, 3.6.24, and 3.7.9, Traefik's default H

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

CVE-2026-43630

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore p

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrap

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

CVE-2026-53984 · CVE-2026-53985 · CVE-2026-53983

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp

CVE-2026-70639

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper w

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp

CVE-2026-70638

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where th

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

Ground Station prior to 0.6.0 Unauthenticated Database Wipe and Arbitrary Data Injection via Socket.IO database_backup full_restore Action

CVE-2026-53983 · CVE-2026-53985 · CVE-2026-53984

Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerabilit

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

llama.cpp b1886–b7445 Double Free via llama-android.cpp

CVE-2026-43622

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1bat

历史摘要 · 未重新核验 · OSV.dev