9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attackers to access sensitive user data by sending requests to ...

CVE-2026-62328

9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attack

历史摘要 · 未重新核验 · NVD

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Versions prior to 1.11.0 allowed attackers to circumvent the rate-limiting of the /login and /r...

CVE-2026-58488

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Versions prior to 1.11.0 allowed attac

历史摘要 · 未重新核验 · NVD

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses...

CVE-2026-58487

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe

历史摘要 · 未重新核验 · NVD

An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a denial of service via the unflatten(...

CVE-2026-39042

An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote

历史摘要 · 未重新核验 · NVD

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” i...

CVE-2026-26396

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/applicati

历史摘要 · 未重新核验 · NVD

The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API response paths when query RBAC was enabled, allowing an authenti...

CVE-2026-62147

The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API respons

历史摘要 · 未重新核验 · NVD

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File In...

CVE-2026-57800

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allows PHP Local File Inclusion....

CVE-2026-57788

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli Anti-Malware Security and Brute-Force Firewall gotmls allows Reflected ...

CVE-2026-57691

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli Anti-Malware S

历史摘要 · 未重新核验 · NVD

Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.Thi...

CVE-2026-57408

Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker proxy-vpn-blocker allows St...

CVE-2026-57399

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proxy & VPN Bl

历史摘要 · 未重新核验 · NVD

A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable applic...

CVE-2026-13014

A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated attacker to execute

历史摘要 · 未重新核验 · NVD

A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all incoming authorization headers and full chat payloads, which may contain per...

CVE-2026-15574

A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all incoming authorizat

历史摘要 · 未重新核验 · NVD

A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AW...

CVE-2026-15508

A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file

历史摘要 · 未重新核验 · NVD

The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage unconditionally (base->CEPTXCNT = len in numaker_hsusbd_e...

CVE-2026-10668

The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage

历史摘要 · 未重新核验 · NVD

Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-58596

Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges o

历史摘要 · 未重新核验 · NVD

Compatibility Test Suite (CTS)

该输入为 Android 兼容性测试套件（CTS）的相关信息，并非安全漏洞公告。CTS 是 Android 平台用于确保设备兼容性的测试工具，不涉及具体的漏洞或安全补丁。因此，本次分析不适用于安全风险场景。

历史摘要 · 未重新核验 · Android Security Bulletin

Compatibility Definition Document (CDD)

该公告引用了Android兼容性定义文档（CDD），而非安全漏洞公告。CDD规定了Android设备必须满足的硬件和软件兼容性要求，以确保应用在不同设备上的一致性。但本次公告未提及任何具体漏洞、CVE编号或安全风险，因此不构成安全事件。攻击

历史摘要 · 未重新核验 · Android Security Bulletin

Tools, build, and related reference

本次Android安全公告页面并非安全漏洞公告，而是关于Android平台构建工具、开发环境设置和相关参考资源的文档页面。该页面提供了Android SDK、构建系统、环境配置等开发支持信息，不涉及任何安全漏洞修复或CVE条目。对于防御方而

历史摘要 · 未重新核验 · Android Security Bulletin

Latest Compatibility Definition Document (CDD)

Android 安全公告发布了最新的兼容性定义文档（CDD）。CDD 是 Android 生态系统中的关键文档，定义了设备必须满足的硬件和软件要求，以确保应用兼容性和系统一致性。此次更新可能包含对 Android 新版本特性的要求说明、安全

历史摘要 · 未重新核验 · Android Security Bulletin