今日共收录 1142 条安全情报，包含 375 个 CVE，381 篇安全通告，以及 103 篇研究论文。
← 返回归档列表CVE-2026-9541
A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqob
CVE-2026-9540
A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component
CVE-2026-8479
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially craf
CVE-2026-8174
Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF). This issue affects Zoho Mail wo
CVE-2026-7310
A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An authenticated malicious
CVE-2026-48136
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access
CVE-2026-48135
A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request pa
CVE-2025-11482
An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating Syst
CVE-2026-44410
This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended
CVE-2026-39661
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in
CVE-2026-39642
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code
CVE-2026-27427
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mas
CVE-2026-25713
MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability
CVE-2026-25104
MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability
CVE-2026-24638
Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Cont
CVE-2026-24590
Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Config
CVE-2026-8047
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited
CVE-2026-8046
The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged
CVE-2026-44469
The affected product extracts installation files to a temporary directory with incorrect default permissions during admi
CVE-2026-44468
The affected product creates a directory with insecure default permissions during administrative installation. This allo