Out of bounds read in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote...
CVE-2026-14384
Out of bounds read in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker to leak cross-o
2026-07-02 归档
今日共收录 1714 条安全情报，包含 914 个 CVE，384 篇安全通告，以及 113 篇研究论文。
← 返回归档列表SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker...
CVE-2026-52186
SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary cod
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote...
CVE-2026-14383
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrar
An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0...
CVE-2026-38891
An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 allows attackers to cau
A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of...
CVE-2026-36911
A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE befor
An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit...
CVE-2026-36910
An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers
A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC...
CVE-2026-36912
A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC-BE before commit 4341cb3
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-11950
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A NULL pointer dereference in the AP4_TkhdAtom::GetTrackId() function of Aleksoid1978 MPC-BE...
CVE-2026-36909
A NULL pointer dereference in the AP4_TkhdAtom::GetTrackId() function of Aleksoid1978 MPC-BE before commit 4341cb3 allow
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker...
CVE-2026-52190
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of s
goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags
CVE-2026-50138
# WebDAV listener ignores `--read-only`, `--upload-only`, and `--no-delete` mode flags **Ecosystem:** Go **Package:** `
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms
CVE-2026-53712
## Summary A flaw in `com.ongres.scram:scram-client` allows an attacker capable of performing a TLS man-in-the-middle (
`oras-go` tar extraction: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution
CVE-2026-50163
### Root cause The tar-extraction helper `ensureLinkPath` at [`content/file/utils.go:262-275`](https://github.com/oras-
oras-go has file store write outside workingDir via symlink traversal
CVE-2026-50162
The file content store in `oras-go` attempts to confine writes to `workingDir` when `AllowPathTraversalOnWrite=false`, b
Ladybird contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration...
CVE-2026-58592
Ladybird contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. When a JavaS
Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows...
CVE-2026-58451
Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to
Improper neutralization of special elements used in an SQL command ('SQL injection')...
CVE-2026-14363
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foun
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki ...
CVE-2026-58517
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension
NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated...
CVE-2026-58593
NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed...
CVE-2026-14340
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token