SOGo 5.12.7 contains a SQL injection vulnerability in the Access Control List management...
CVE-2026-8851
SOGo 5.12.7 contains a SQL injection vulnerability in the Access Control List management functionality that allows authe
2026-05-19 归档
今日共收录 917 条安全情报，包含 132 个 CVE，384 篇安全通告，以及 107 篇研究论文。
← 返回归档列表Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability...
CVE-2026-47092
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attac
Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape...
CVE-2026-47090
Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd
Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free...
CVE-2026-45246
Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite p
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability...
CVE-2026-47091
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to r
Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows...
CVE-2026-45245
Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch
Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon...
CVE-2026-45242
Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authe
Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script...
CVE-2026-45243
Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge
ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
CVE-2026-46559
An incorrect check in the JP2 will result in an heap buffer over-write of a single byte when specifying certain options.
ImageMagick: Stack overflow in fx operation
CVE-2026-46557
Due to a missing depth check a stack overflow can occur in the fx operation by passing a crafted argument.
ImageMagick: Use-After-Free in MSL decoder.
CVE-2026-46523
A crafted MSL image can trigger a heap-use-after-free.
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
CVE-2026-46522
Due to a missing check in the MIFF decoder a crafted file could cause an infinite loop resulting in CPU exhaustion.
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
CVE-2026-46521
When using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check.
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
CVE-2026-46520
When reading multiple images with different dimensions an out of bounds heap write can occur.
ImageMagick: Policy Bypass in MNG coder could
CVE-2026-45664
Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would al
ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
CVE-2026-45624
When performing a polynomial distortion an out of bounds over-read of 24 bytes can occur when specifying specific argume
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
CVE-2026-45367
## Summary All implementations of FHIRPathEngine accept arbitrary FHIRPath expressions and evaluate them without input
NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes
CVE-2026-45554
### Summary Two FastAPI routes that serve per-component static assets in NiceGUI accept a sub-path parameter that may r
OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI
CVE-2026-45686
### Summary A remotely reachable integer overflow in OBI's memcached text protocol parser can crash the OBI process and
OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages
CVE-2026-45685
### Summary Malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote un