SQL injection in syslog-ng SQL destionation driver
CVE-2026-39879
Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb
2026-07-21 归档
今日共收录 1301 条安全情报，包含 465 个 CVE，462 篇安全通告，以及 91 篇研究论文。
← 返回归档列表xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification
CVE-2026-44978
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the
Frappe LMS enrollment bypass in paid courses via unrelated batch
CVE-2026-39385
Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment vali
xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow
CVE-2026-44178
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within t
xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)
CVE-2026-55645
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client
NULL Pointer Dereference in REST API properties_parse via Malformed user_properties
CVE-2026-47276
In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attac
XRDP is vulnerable to a server timing attack, leading to user enumeration
CVE-2026-42218
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login in
nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS
CVE-2026-47275
In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicio
xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass
CVE-2026-41521
xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing s
NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read
CVE-2026-35217
NanoMQ contains a protocol-semantics flaw in its MQTT v5 `SUBSCRIBE` handling: if a subscription entry is missing the fi
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory
CVE-2026-58481
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped fil
xrdp: lib_palette_update Heap Buffer Overflow & RCE
CVE-2026-41252
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups
CVE-2026-58414
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recu
net/sched: dualpi2: fix GSO backlog accounting
CVE-2026-64207
In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting Whe
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
CVE-2026-64192
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if
i2c: stub: Reject I2C block transfers with invalid length
CVE-2026-64191
In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid
net: team: fix NULL pointer dereference in team_xmit during mode change
CVE-2026-64190
In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team_xmi
netfilter: ipset: fix race between dump and ip_set_list resize
CVE-2026-64189
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ip_set_
net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
CVE-2026-64188
In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free i
xfs: fail recovery on a committed log item with no regions
CVE-2026-64187
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no