#severity:medium

共收录 5559 条相关情报。

← 返回所有主题
安全公告2026-06-29 发布INFO

A use-after-free issue was addressed with improved memory management. This issue is fixed in...

CVE-2026-43699

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...

CVE-2026-43676

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...

CVE-2026-43663

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

A cross-origin issue was addressed with improved tracking of security origins. This issue is...

CVE-2026-43700

A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

A use-after-free issue was addressed with improved memory management. This issue is fixed in...

CVE-2026-43704

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and...

CVE-2026-43703

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...

CVE-2026-39872

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...

CVE-2026-28979

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a...

CVE-2026-31016

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escal

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is...

CVE-2026-13593

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minif

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

A flaw was found in p11-kit. The RPC message attribute parsing functions...

CVE-2026-13757

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_mes

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows...

CVE-2026-57958

Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows...

CVE-2026-57946

Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows unauthenticated attacke

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook...

CVE-2026-57947

Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registration endpoint that al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints ...

CVE-2026-57952

Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_web

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in...

CVE-2026-57954

Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSorting

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

SigNoz through 0.130.1 contains a broken access control vulnerability that allows authenticated...

CVE-2026-57956

SigNoz through 0.130.1 contains a broken access control vulnerability that allows authenticated users to access other or

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated...

CVE-2026-57953

Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spectator-role users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4...

CVE-2026-13592

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the...

CVE-2026-57943

LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that

历史摘要 · 未重新核验 · GitHub Advisory