Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free...
CVE-2026-47917
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could
2026-06-10 归档
今日共收录 1730 条安全情报，包含 831 个 CVE，478 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free...
CVE-2026-47919
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free...
CVE-2026-47921
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer...
CVE-2026-47925
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnera
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free...
CVE-2026-47915
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free...
CVE-2026-47918
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds...
CVE-2026-47911
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that
A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged...
CVE-2026-6444
A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specif
A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could...
CVE-2026-6445
A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information
Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write...
CVE-2026-48305
Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result
Net::IMAP: Denial of Service via incomplete raw argument validation
CVE-2026-47241
### Summary Several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection a
shell-quote quote() does not escape newlines in object .op values
CVE-2026-9277
### Summary `shell-quote`'s `quote()` function did not validate object-token inputs against the operator model used by
Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections
CVE-2026-47737
### Impact Puma is vulnerable to source IP spoofing when `set_remote_address proxy_protocol: :v1` is enabled and persis
Dulwich has unbounded memory allocation in receive-pack from crafted thin packs
CVE-2026-47734
## Impact An uncontrolled-resource-consumption (memory exhaustion) denial-of-service vulnerability (CWE-400 / CWE-789).
nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator
CVE-2026-47726
`internal/api/audit.go:12` — `handleGetAuditLog` does no admin check. The route is bearer-auth gated only; any operator
nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml
CVE-2026-47722
`internal/configgen/generator.go:86,108,119` interpolates the operator-supplied `ListenHost` and `TunDevice` fields raw
FUXA's scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions
CVE-2026-47721
## Summary An authorization issue in the Scheduler API allowed authenticated non-admin users to create or modify schedu
Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`
CVE-2026-47712
### Impact dulwich.porcelain.format_patch(outdir=...) derives each patch filename from the commit's subject line. Prior
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
CVE-2026-47244
### Impact DefaultHttp2Connection.DefaultEndpoint initialises maxActiveStreams/maxStreams to Integer.MAX_VALUE, and Http
Netty: SCTP reassembly nests buffers without bound
CVE-2026-46340
For each non-complete SctpMessage fragment the handler does `fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBu