Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. Both Apple iOS and Apple iPadOS have security vulnerabilities that stem from authorization issues, which may...

PT-2026-7577

Missing Authentication for Critical Function, Improper Access Control vulnerability in Dinosoft Business Solutions Dinosoft ERP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dinosoft ERP: from 3.0.1 through 11022026. NOTE: The vendor was contacted early about...

GitLab 跨站脚本漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Versions of GitLab prior to GitLab CE and EE 18.6.6, including 17.1.x,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-13 (UTSA-2026-005344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005344 advisory. Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client...

Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is an operating system developed by the American company Apple. Versions of Apple macOS Tahoe prior to version 26.3 contained a security vulnerability. This vulnerability was due to permission issues, and it could allow applications to monitor keystrokes without user consent...

QNAP Systems File Station 5 缓冲区错误漏洞

QNAP Systems File Station 5 is a file management system developed by QNAP Systems, a company based in Taiwan, China. Versions of QNAP Systems File Station 5 prior to 5.5.6.5068 had a buffer error vulnerability. This vulnerability stemmed from out-of-bounds read attacks, which could lead to the...

CVE-2026-23716

A vulnerability has been identified in Simcenter Femap All versions V2512, Simcenter Nastran All versions V2512. The affected applications contains an out of bounds read vulnerability while parsing specially crafted XDB files. This could allow an attacker to execute code in the context of the...

munge 安全漏洞

Munge is an identity verification service developed by Chris Dunlap, used for creating and verifying credentials. Versions of MUNGE prior to 0.5.18 contained security vulnerabilities; these vulnerabilities were caused by buffer overflows in Munged, which could lead to the disclosure of encrypted...

PT-2026-7315

Name of the Vulnerable Software and Affected Versions IntelR Memory and Storage Tool versions prior to 2.5.2 Description The IntelR Memory and Storage Tool, in versions before 2.5.2, has default permissions that may allow a local escalation of privilege. An authenticated user with a high complexi...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a visual effects and dynamic graphics production software developed by Adobe, Inc. in the United States. This software is primarily used for 2D and 3D compositing, animation production, and visual special effects. Versions of Adobe After Effects prior to 25.6 contained a...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 145.0.7632.45 contained a security vulnerability, which was caused by improper implementation of the WebGPU mechanism. This vulnerability could lead to excessive memory access through...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 145.0.7632.45 contained a resource management vulnerability. This vulnerability stemmed from a problem with CSS that allowed for the reuse of resources after they were released, potentially...

CVE-2025-22111 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-22111 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2026-23019 affecting package kernel for versions less than 6.6.121.1-1

CVE-2026-23019 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49968 affecting package kernel for versions less than 6.6.121.1-1

CVE-2024-49968 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-13151 affecting package gnutls for versions less than 3.8.3-8

CVE-2025-13151 affecting package gnutls for versions less than 3.8.3-8. A patched version of the package is available...

CVE-2026-22796 affecting package edk2 for versions less than 20240524git3e722403cd16-14

CVE-2026-22796 affecting package edk2 for versions less than 20240524git3e722403cd16-14. A patched version of the package is available...

CVE-2026-25916

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage...

UBUNTU-CVE-2026-25916

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage...

PT-2026-7270

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 SU5 Description An authentication bypass exists in Ivanti Endpoint Manager that allows a remote, unauthenticated attacker to leak stored credential data. This flaw is actively exploited in the wil...