A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project...
CVE-2025-60474
A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allo
2026-06-25 归档
今日共收录 1364 条安全情报，包含 629 个 CVE，391 篇安全通告，以及 120 篇研究论文。
← 返回归档列表A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c)...
CVE-2025-60473
A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c) of GPAC Project/MP4Box
ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This...
CVE-2026-9778
ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote a
OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows...
CVE-2026-8663
OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execut
ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure...
CVE-2026-9776
ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability
A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC...
CVE-2025-60466
A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.0
Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This...
CVE-2026-9773
Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote at
A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c)...
CVE-2025-60467
A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box
ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code...
CVE-2026-9779
ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-47093
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows...
CVE-2026-47110
Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to ca
GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...
CVE-2026-2050
GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a
GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is...
CVE-2025-60468
GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflo
MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This...
CVE-2026-10043
MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remot
Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote...
CVE-2026-13038
Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execute arbi
A flaw was found in KubeVirt's safepath package. The OpenAtNoFollow function uses O_PATH...
CVE-2026-13201
A flaw was found in KubeVirt's safepath package. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file des
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote...
CVE-2026-13035
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitra
Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197...
CVE-2026-13033
Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker
The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence...
CVE-2026-1840
The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence of authentication contr
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to...
CVE-2026-13036
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code ins