libexpat before 2.8.2 has an integer overflow in getAttributeId.
CVE-2026-56405
libexpat before 2.8.2 has an integer overflow in getAttributeId.
2026-06-22 归档
今日共收录 737 条安全情报，包含 75 个 CVE，376 篇安全通告，以及 39 篇研究论文。
← 返回归档列表libexpat before 2.8.2 has an integer overflow in storeAtts.
CVE-2026-56403
libexpat before 2.8.2 has an integer overflow in storeAtts.
libexpat before 2.8.2 has an integer overflow in addBinding.
CVE-2026-56404
libexpat before 2.8.2 has an integer overflow in addBinding.
phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and...
CVE-2026-56396
phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that
Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the assets...
CVE-2026-56394
Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the assets/icon endpoint where the ex
Craft CMS 4.x (>= 4.0.0-RC1, < 4.17.0-beta.1) and 5.x (>= 5.0.0-RC1, < 5.9.0-beta.1) contain...
CVE-2026-56393
Craft CMS 4.x (>= 4.0.0-RC1, = 5.0.0-RC1, < 5.9.0-beta.1) contain multiple stored cross-site scripting vulnerabilities w
Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A...
CVE-2026-56384
Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A Control Panel user with
ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB ...
CVE-2026-56367
ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding pat
Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and <= 5.9.13 contain a remote code...
CVE-2026-56382
Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and <= 5.9.13 contain a remote code execution vulnerability
Capgo before 12.128.2 contains a broken row level security policy in the org_users table that...
CVE-2026-56251
Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users
ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the...
CVE-2026-56378
ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage
Capgo before 12.128.2 contains an improper access control vulnerability in the public...
CVE-2026-56253
Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function that
Craft CMS versions >= 5.0.0-RC1, <= 5.9.13 and >= 4.0.0-RC1, <= 4.17.7 contain an authorization...
CVE-2026-56385
Craft CMS versions >= 5.0.0-RC1, = 4.0.0-RC1, <= 4.17.7 contain an authorization bypass in the assets/preview-file endpo
Craft CMS from version 5.0.0-RC1 contains a stored cross-site scripting vulnerability in the User...
CVE-2026-56381
Craft CMS from version 5.0.0-RC1 contains a stored cross-site scripting vulnerability in the User Permissions page where
Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build...
CVE-2026-56316
Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build/upload/:jobId/* endpoint t
Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public...
CVE-2026-56239
Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_usage_overage SECURITY
Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable.twig...
CVE-2026-56383
Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable.twig component when using the
Capgo before 12.128.2 contains an authentication bypass vulnerability in the /build/upload/:jobId...
CVE-2026-56299
Capgo before 12.128.2 contains an authentication bypass vulnerability in the /build/upload/:jobId/* endpoint that allows
picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils...
CVE-2025-71348
picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config funct
Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and ...
CVE-2026-56229
Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that