Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...
CVE-2026-62826
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
2026-07-17 归档
今日共收录 1302 条安全情报，包含 372 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Concurrent execution using shared resource with improper synchronization ('race condition') in...
CVE-2026-58598
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine all
YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as...
CVE-2026-57076
YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key i
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute...
CVE-2026-59117
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup...
CVE-2026-57075
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-11740
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline...
CVE-2026-57077
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In t
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-14253
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation...
CVE-2026-53411
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl
Improper neutralization of input during web page generation ('cross-site scripting') in Windows...
CVE-2026-58643
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an u
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to...
CVE-2026-14782
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Cu
YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor...
CVE-2026-13713
YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on
An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length...
CVE-2026-60073
An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB
An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger...
CVE-2026-57896
An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupti
A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a...
CVE-2026-61378
A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to
EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46...
CVE-2024-34268
EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow
Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042...
CVE-2024-32389
Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attack
remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL...
CVE-2026-63397
remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed t
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation...
CVE-2026-53410
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl
An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger...
CVE-2026-60140
An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupti