JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(),...
CVE-2026-56018
JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory
2026-06-30 归档
今日共收录 1015 条安全情报，包含 254 个 CVE，381 篇安全通告，以及 97 篇研究论文。
← 返回归档列表Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the...
CVE-2026-55955
Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the
Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was...
CVE-2026-55957
Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate
JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when...
CVE-2026-56017
JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful t
Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for...
CVE-2026-55956
Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ig
Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs...
CVE-2026-53434
Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connect
luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login...
CVE-2026-57999
luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows
CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is...
CVE-2026-13593
CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minif
A flaw was found in p11-kit. The RPC message attribute parsing functions...
CVE-2026-13757
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_mes
Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook...
CVE-2026-57947
Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registration endpoint that al
Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints ...
CVE-2026-57952
Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_web
ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control...
CVE-2026-57950
ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderCon
ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization...
CVE-2026-57949
ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module
Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation...
CVE-2026-57959
Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates usage count before as
SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers...
CVE-2026-57955
SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary C
Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows...
CVE-2026-57948
Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the
Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in...
CVE-2026-57954
Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSorting
Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table...
CVE-2026-57951
Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfi
Papermark through 0.22.0 contains a cross-origin resource sharing (CORS) misconfiguration...
CVE-2026-57957
Papermark through 0.22.0 contains a cross-origin resource sharing (CORS) misconfiguration vulnerability that allows unau
SigNoz through 0.130.1 contains a broken access control vulnerability that allows authenticated...
CVE-2026-57956
SigNoz through 0.130.1 contains a broken access control vulnerability that allows authenticated users to access other or