今日共收录 1188 条安全情报，包含 407 个 CVE，402 篇安全通告，以及 101 篇研究论文。
← 返回归档列表CVE-2026-10295
A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_
CVE-2025-59614
Memory Corruption when sending random number generator command with insufficient output buffer size.
CVE-2025-59613
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
CVE-2025-59612
Memory corruption in windows drivers while sending incorrect trusted application request
CVE-2025-59611
Memory corruption in diagnostic services due to absence of input validation
CVE-2025-59610
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-spa
CVE-2025-59609
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
CVE-2025-59606
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initi
CVE-2025-59605
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
CVE-2025-59604
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVE-2025-59601
Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized
CVE-2019-25718
Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk
CVE-2026-49491
Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by
CVE-2026-40964
Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote at
CVE-2026-28586
In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. T
CVE-2026-28581
In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a
CVE-2026-28580
In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to lo
CVE-2026-28578
In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper in
CVE-2026-28577
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This
CVE-2026-10294
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transa