今日共收录 1138 条安全情报，包含 379 个 CVE，396 篇安全通告，以及 80 篇研究论文。
← 返回归档列表CVE-2026-61504
Rejetto HFS 3.0.0 through 3.2.0 does not escape file names in its fallback "basic" web listing, and this listing can be
CVE-2026-61503
Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the
CVE-2026-61502
Rejetto HFS 3.0.0 through 3.2.0 accepts state-changing API requests via the GET method and exempts GET requests from its
CVE-2026-61501
Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote u
CVE-2026-61463
Shiori contains a privilege escalation vulnerability in the account update endpoint that allows authenticated users to m
CVE-2026-61462
mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to re
CVE-2026-60103
Blender 3.0.0 through 5.1.2 contains an out-of-bounds read vulnerability that allows attackers to trigger a crash or rea
CVE-2026-53365
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb
CVE-2026-53364
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leak in hci_le_big_
CVE-2026-57433
Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retr
CVE-2026-57432
Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack
CVE-2026-13221
Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 6553
CVE-2026-61692
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61454. Reason: This candidate is a
CVE-2026-59245
In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` collided with the global all-DAGs permission reso
CVE-2026-58065
The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling S
CVE-2026-6847
Remote Code Execution vulnerability exists in ThemisNETPanel due to missing authentication for a critical file upload fu
CVE-2026-40553
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue
CVE-2026-40467
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may
CVE-2026-15584
A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged d
CVE-2026-15559
A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the