最新预警列表

HIGH Cisco PSIRT 2026-08-17

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload

HIGH Cisco PSIRT 2026-08-17

ClamAV Vulnerabilities Affecting Cisco Products: August 2026

Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service (DoS) condition, interrupting scanning operations.  For more information about these vulnerabilities, see the Details section of this advisory. For additional in

HIGH Cisco PSIRT 2026-08-17

Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability

A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condit

HIGH Cisco PSIRT 2026-08-17

Cisco IOS XE Software SNMP Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability i

HIGH Cisco PSIRT 2026-08-17

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability

A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper ha

HIGH Cisco PSIRT 2026-08-17

Cisco Secure Firewall Management Center Software Static Credential Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted syst

HIGH 阿里云 Alibaba Cloud Linux 安全公告 2026-08-17

CVE-2026-46300(Fragnesia)内核漏洞不受影响情况说明

高危CVE修复说明CVE-2026-31431 内核升级修复说明CVE-2026-43284 & CVE-2026-43500 (DirtyFrag)内核漏洞修复说明

HIGH 阿里云 Alibaba Cloud Linux 安全公告 2026-08-17

CVE-2026-43284 & CVE-2026-43500 (DirtyFrag)内核漏洞修复说明

高危CVE修复说明CVE-2026-31431 内核升级修复说明CVE-2026-46300(Fragnesia)内核漏洞不受影响情况说明

HIGH 阿里云 Alibaba Cloud Linux 安全公告 2026-08-17

CVE-2026-31431 内核升级修复说明

高危CVE修复说明CVE-2026-43284 & CVE-2026-43500 (DirtyFrag)内核漏洞修复说明CVE-2026-46300(Fragnesia)内核漏洞不受影响情况说明

HIGH NVD Recent 2026-08-12

CVE-2026-18352:The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including,

The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary

HIGH NVD Recent 2026-08-12

CVE-2026-13339:The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1

The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary f

HIGH Cisco PSIRT 2026-08-12

Cisco Integrated Management Controller Argument Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected system and elevate

HIGH CISA KEV 2026-08-11

CVE-2026-72898:Metabase Metabase SQL Injection Vulnerability

Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance. From there, the attacker could change

HIGH CISA KEV 2026-08-11

CVE-2026-20349:Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial

HIGH NVD Recent 2026-08-10

CVE-2026-10848:The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1

站内所有资源、漏洞预警、工具与专题内容仅面向企业授权自测、合规研究与安全运维使用。本站不提供可直接用于非法攻击的程序、载荷或黑产平台入口。