A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypass...

CVE-2026-8918

ASUS Armoury Crate（华硕奥创中心）是一款用于管理硬件设置、RGB灯光和系统性能的软件，广泛安装于华硕主板和笔记本中。该软件存在一个安全漏洞（CVE-2026-8918），源于其对允许输入的白名单（allowed input

历史摘要 · 未重新核验 · NVD

A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm substitutes the login username into an ...

CVE-2026-11748

CVE-2026-11748 影响 centraldogma-server-auth-shiro 组件，版本低于 0.84.0。漏洞位于 SearchFirstActiveDirectoryRealm 中，该模块在构建 LDAP 搜索过滤器

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in coollabsio coolify 4.0.0. Impacted is an unknown function of the component Image Name Handler. Such manipulation leads to os command injection....

CVE-2026-12815

CVE-2026-12815 是一个影响 coollabsio coolify 4.0.0 版本的操作系统命令注入漏洞。漏洞位于镜像名称处理组件（Image Name Handler）中，攻击者可以通过远程方式利用该漏洞，在低权限（需登录）

历史摘要 · 未重新核验 · NVD

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been re...

CVE-2026-12845

CVE-2026-12845 是一个被拒绝（REJECT）的候选编号。该编号因错误发布而被标记为无效，所有相关的参考信息、技术描述及影响分析均已被移除，以防止误用。此 CVE 没有关联的任何漏洞细节、CVSS 评分、EPSS 评分，也未出现

历史摘要 · 未重新核验 · NVD

A flaw has been found in Comfast CF-WR631AX V3 up to 2.7.0.8. This issue affects the function system of the file /cgi-bin/mbox-config?section=ping_config of the component API En...

CVE-2026-12814

Comfast CF-WR631AX V3 固件版本 2.7.0.8 及之前版本的 API 端点 /cgi-bin/mbox-config?section=ping_config 中存在 OS 命令注入漏洞。攻击者可通过向 destinat

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processo...

CVE-2026-12813

该漏洞影响 activepieces 至 0.83.0 版本，存在于文件 URL 处理器的 handleUrlFile 函数中（路径为 packages/server/engine/src/lib/variables/processors/

历史摘要 · 未重新核验 · NVD

A-COMPASS: Formal Foundations for Anonymity Analysis in Microdata

A-COMPASS: Formal Foundations for Anonymity Analysis in Microdata

历史摘要 · 未重新核验 · arXiv cs.CR

A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAM...

CVE-2026-12804

A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-p

历史摘要 · 未重新核验 · NVD

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a poli...

CVE-2026-56412

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking

历史摘要 · 未重新核验 · NVD

xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.

CVE-2026-56411

xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.

历史摘要 · 未重新核验 · NVD

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.

CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.

历史摘要 · 未重新核验 · NVD

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.

CVE-2026-56409

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.

历史摘要 · 未重新核验 · NVD

libexpat before 2.8.2 has an integer overflow in copyString.

CVE-2026-56408

libexpat before 2.8.2 has an integer overflow in copyString.

历史摘要 · 未重新核验 · NVD

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

CVE-2026-56407

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

历史摘要 · 未重新核验 · NVD

libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

CVE-2026-56406

libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse

历史摘要 · 未重新核验 · NVD

libexpat before 2.8.2 has an integer overflow in getAttributeId.

CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId.

历史摘要 · 未重新核验 · NVD

libexpat before 2.8.2 has an integer overflow in addBinding.

CVE-2026-56404

libexpat before 2.8.2 has an integer overflow in addBinding.

历史摘要 · 未重新核验 · NVD

libexpat before 2.8.2 has an integer overflow in storeAtts.

CVE-2026-56403

libexpat before 2.8.2 has an integer overflow in storeAtts.

历史摘要 · 未重新核验 · NVD

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privilege...

CVE-2026-56396

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that

历史摘要 · 未重新核验 · NVD

Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the assets/icon endpoint where the extension parameter is not validated before file existence ...

CVE-2026-56394

Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the assets/icon endpoint where the ex

历史摘要 · 未重新核验 · NVD