IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive...
CVE-2026-15322
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the
2026-07-18 归档
今日共收录 1491 条安全情报，包含 418 个 CVE，581 篇安全通告，以及 194 篇研究论文。
← 返回归档列表IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute...
CVE-2026-14501
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain se
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary...
CVE-2026-15069
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to imp
An issue was discovered in openRISC OR1200 commit 83ac6b. An output mismatch between the RTL and...
CVE-2025-51677
An issue was discovered in openRISC OR1200 commit 83ac6b. An output mismatch between the RTL and the netlist of the or12
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this...
CVE-2026-16073
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function S
PocketSphinx: Buffer overflows in language and acoustic model loading code
CVE-2026-54559
### Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary condition
ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes
CVE-2026-53496
## Summary ExifReader 4.40.0 can throw an uncaught `RangeError: Offset is outside the bounds of the DataView` while par
Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)
CVE-2026-54567
## 1. Header | Field | Value | |---|---| | **Title** | Extension-denylist bypass via case-folding asymmetry in name-ove
Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
CVE-2026-53597
## Summary The TypeScript Prompty loader used `gray-matter` without overriding executable frontmatter engines. `gray-mat
Prompty: Arbitrary file read via file reference expansion
CVE-2026-53598
## Summary Prompty loaders expanded `${file:...}` references in `.prompty` frontmatter without enforcing that the resolv
mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath
CVE-2026-54561
### Impact `context_import` passed the caller-supplied `filePath` directly to `fs.readFileSync` with no path confinemen
Gitea has insufficient permission checks for Composer package source links
CVE-2026-27771
### CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package s
sh _uid does not drop supplementary groups (incomplete privilege drop)
CVE-2026-54552
### Impact The `_uid` option performed an incomplete privilege drop on Linux/Unix-like systems. When `sh` was run from
A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 ...
CVE-2026-9588
A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997) within the voicem
The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions...
CVE-2025-59866
The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Es
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution...
CVE-2026-9762
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under u
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 ...
CVE-2026-9586
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint pr
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the...
CVE-2026-63308
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template help
SurrealDB before 3.1.5 fail to apply field-level SELECT permissions to ORDER BY clauses, allowing...
CVE-2026-63309
SurrealDB before 3.1.5 fail to apply field-level SELECT permissions to ORDER BY clauses, allowing authenticated users to
An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 ...
CVE-2026-9587
An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file