A vulnerability was determined in 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97970f91f...
CVE-2026-8113
A vulnerability was determined in 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97970f91f. Affected by this vuln
2026-05-08 归档
今日共收录 1100 条安全情报，包含 294 个 CVE，452 篇安全通告，以及 61 篇研究论文。
← 返回归档列表Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to...
CVE-2026-41105
Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges ove
Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that...
CVE-2026-41928
Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-2710
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an...
CVE-2026-7541
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to
Improper neutralization of special elements in output used by a downstream component ('injection'...
CVE-2026-26164
Improper neutralization of special elements in output used by a downstream component ('injection') in M365 Copilot allow
OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple...
CVE-2026-40213
OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This un
Externally controlled reference to a resource in another sphere in Microsoft Partner Center...
CVE-2026-34327
Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attac
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker...
CVE-2026-35435
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges
Improper neutralization of special elements in M365 Copilot allows an unauthorized attacker to...
CVE-2026-26129
Improper neutralization of special elements in M365 Copilot allows an unauthorized attacker to disclose information over
Improper neutralization of input during web page generation ('cross-site scripting') in Azure...
CVE-2026-32207
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an
rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding
CVE-2026-44662
`CipherCtxRef::cipher_update`, `CipherCtxRef::cipher_update_vec`, and `symm::Crypter::update` incorrectly sized output b
Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install
CVE-2026-44641
### Summary Microsoft APM normalizes marketplace plugins by copying plugin components referenced in `plugin.json` into `
Pathological inputs could cause DoS through consumePhrase when parsing an email address according...
CVE-2026-42499
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to...
CVE-2026-8142
VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use
A malicious module proxy can exploit a flaw in the go command's validation of module checksums to...
CVE-2026-42501
A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum databa
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger...
CVE-2026-39820
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion
A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The affected element is the...
CVE-2026-8088
A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The affected element is the function GDfieldinfo of the
A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. Impacted is the function...
CVE-2026-8087
A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. Impacted is the function GDnentries of the file frm
A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an...
CVE-2026-8098
A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the