NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability mig...

CVE-2026-24163

NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deseri

历史摘要 · 未重新核验 · NVD

NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution,...

CVE-2026-24142

NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful ex

历史摘要 · 未重新核验 · NVD

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might...

CVE-2025-33255

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserial

历史摘要 · 未重新核验 · NVD

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, and includin...

CVE-2026-7284

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation

历史摘要 · 未重新核验 · NVD

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where ...

CVE-2026-6555

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including,

历史摘要 · 未重新核验 · NVD

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15.

CVE-2026-8495

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.

历史摘要 · 未重新核验 · NVD

CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the web-based installer (public/installer/index.php) is vulnerable to unauthenticat...

CVE-2026-34234

CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the web-based installer (p

历史摘要 · 未重新核验 · NVD

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

Measuring Safety Alignment Effects in Autonomous Security Agents

本文研究自主安全智能体（Autonomous Security Agents）在执行漏洞分析任务时，不同安全对齐（safety alignment）程度的语言模型（包括原始对齐模型与未经审查或“消融”模型）的行为差异。传统单轮拒绝基准无法评

历史摘要 · 未重新核验 · arXiv cs.CR

The WPB Floating Menu & Categories for WordPress – Sticky Side Menu with Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Icon CSS Class' categor...

CVE-2026-4811

WordPress 插件 WPB Floating Menu & Categories (Sticky Side Menu with Icons) 版本 1.0.8 及之前存在存储型跨站脚本漏洞。该插件在处理 'Icon CSS Class

历史摘要 · 未重新核验 · NVD

A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session t...

CVE-2026-9152

CVE-2026-9152 是 Altium 365 SearchService 中存在的一个认证缺失漏洞。该漏洞源于一个遗留的 SOAP 端点，该端点暴露了搜索索引操作，但未要求任何形式的身份验证、会话令牌或身份验证。未经身份验证的网络攻

历史摘要 · 未重新核验 · NVD

The Broadstreet plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.52.2 via the get_sponsored_meta AJAX action due to...

CVE-2026-1881

Broadstreet WordPress 插件（版本 1.52.2 及以下）存在不安全直接对象引用（IDOR）漏洞。该漏洞源于 get_sponsored_meta AJAX 操作中缺乏对用户控制键的验证，导致已通过身份验证的攻击者（至少

历史摘要 · 未重新核验 · NVD

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo...

CVE-2026-9149

CVE-2026-9149 是 libsolv 库中的一个堆缓冲区溢出漏洞。libsolv 是一个用于处理软件包依赖关系的库，常用于 RPM 等包管理器。漏洞存在于 `repo_add_solv` 函数中，当处理特制的 `.solv` 文件

历史摘要 · 未重新核验 · NVD

authentik is an open-source identity provider. Versions 2025.12.4 and prior, and versions 2026.2.0-rc1 through 2026.2.2 were vulnerable to Authentication Bypass through SAML Nam...

CVE-2026-40165

CVE-2026-40165 是一个影响开源身份提供商 authentik 的认证绕过漏洞。该漏洞源于 authentik 在解析 SAML 断言中的 NameID 值时，对 XML 注释的处理不当。攻击者可以通过在 NameID 值中注入

历史摘要 · 未重新核验 · NVD

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metada...

CVE-2026-9150

libsolv 是一款用于解析软件包元数据的库，被多个 Linux 发行版的包管理器（如 Zypper、DNF）广泛使用。该漏洞存在于 libsolv 的 Debian 元数据解析器中，当处理特制的 Debian 仓库元数据时，会触发栈缓冲

历史摘要 · 未重新核验 · NVD

Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL t...

CVE-2026-47782

CVE-2026-47782 影响 Android 应用 "RoboForm Password Manager"（由 Siber Systems, Inc. 开发）。该应用在处理 Android Intent 时，未对 URL 进行充分验证

历史摘要 · 未重新核验 · NVD

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and prior, network-libp2p discovery accepts signed PeerContact updates from...

CVE-2026-40094

该漏洞存在于 Nimiq 区块链的 Rust 实现中，具体位于 network-libp2p 的发现组件。在 1.3.0 及之前版本中，PeerContact 更新消息被非信任节点接受并存储到联系人簿中，但缺少对地址列表为空的校验。后续构建

历史摘要 · 未重新核验 · NVD

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and below, a malicious network peer can crash any Nimiq full node by publis...

CVE-2026-40092

Nimiq区块链项目的Rust实现中的nimiq-blockchain组件（版本1.3.0及以下）存在一个严重缺陷，可被远程攻击者利用导致节点崩溃。漏洞源于在处理Kademlia DHT记录时，对Ed25519签名的验证过程不够严谨。具体而

历史摘要 · 未重新核验 · NVD

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbi...

CVE-2026-8632

CVE-2026-8632 是 HP Linux Imaging and Printing Software 中的一个潜在安全漏洞。攻击者可通过操作系统命令注入实现权限提升和任意代码执行。该漏洞影响 HP 在 Linux 系统上提供的成像和

历史摘要 · 未重新核验 · NVD

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbi...

CVE-2026-8631

CVE-2026-8631 是 HP Linux Imaging and Printing (HPLIP) 软件中的一个潜在安全漏洞。该漏洞存在于 hpcups 处理路径中，当处理特制的打印数据时，可能发生整数溢出，进而导致权限提升或任意代

历史摘要 · 未重新核验 · NVD