A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix...
CVE-2026-16103
A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix for CVE-2026-9798, wher
2026-07-18 归档
今日共收录 1491 条安全情报，包含 418 个 CVE，581 篇安全通告，以及 194 篇研究论文。
← 返回归档列表A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This...
CVE-2026-16108
A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible
HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper...
CVE-2026-21761
HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may
Keycloak provides a mechanism called Client Policies to enforce security requirements on clients,...
CVE-2026-16093
Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them
Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows...
CVE-2026-63101
Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers t
ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes...
CVE-2026-57860
ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes the MCP servers defined i
Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api...
CVE-2026-63307
Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/{i
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing)...
CVE-2026-21760
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper a
HCL DevOps Loop is affected by insufficient input validation that allows special characters where...
CVE-2026-21764
HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restric
Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low...
CVE-2026-63100
Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role u
Missing authentication for critical function vulnerability in Vimesoft Inc. Enterprise Video...
CVE-2026-12691
Missing authentication for critical function vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authenticat
Authorization bypass through User-Controlled key vulnerability in Gis Informatics Engineering...
CVE-2026-11763
Authorization bypass through User-Controlled key vulnerability in Gis Informatics Engineering Consulting Laboratory R&D
TheHive through 4.1.24 contains a broken object-level authorization vulnerability in the...
CVE-2026-63099
TheHive through 4.1.24 contains a broken object-level authorization vulnerability in the attachment download endpoints t
Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string...
CVE-2026-9537
Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode()
osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading...
CVE-2026-14871
osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Obje
Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS
CVE-2026-54247
## Summary The Kubernetes admission webhook handler reads the entire request body using `io.ReadAll(r.Body)` without an
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
CVE-2026-55574
## Summary The `structured_outputs.regex` API parameter passes a user-supplied regex string directly to grammar compile
vLLM has Remote DoS via Invalid Recovered Token Reinjection
CVE-2026-54234
## Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered tok
Why Not Fix It Once and for All? An Empirical Study of Multiple Patches for Vulnerability Fixes in Open-Source Software
该论文对开源软件中由多个补丁组成的漏洞修复序列进行系统性实证研究。现有研究大多关注单一补丁，但实际中许多漏洞需要多个补丁才能彻底修复，这给漏洞分析和补丁应用带来挑战。作者通过手动审查1,646条多补丁修复记录，构建了一个由3个主类别和6个子
京公网安备 11000002002063号
输入内容无效或缺失，无法生成情报摘要。标题为公安备案号，来源URL为公安备案查询页面，未提供任何安全事件或威胁情报信息。