The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is...
CVE-2026-12900
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-S
2026-07-21 归档
今日共收录 1301 条安全情报，包含 465 个 CVE，462 篇安全通告，以及 91 篇研究论文。
← 返回归档列表An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C...
CVE-2026-52656
An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an a
The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function...
CVE-2024-51314
The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/se
The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function...
CVE-2024-51312
The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/Se
The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function...
CVE-2024-51315
The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/Se
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement
CVE-2026-12590
### Impact When body-parser is configured with an invalid `limit` option value, such as an unparseable string or `NaN`,
Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)
CVE-2026-59729
## Summary The fix for CVE-2026-54298 (GHSA-jrpj-wcv7-9fh9) added an `INVALID_ATTR_NAME_CHAR` guard to `addAttribute()`
@astrojs/rss: XML Injection via Unescaped RSS Feed Fields
CVE-2026-59728
## Summary In `@astrojs/rss`, the `source.title` and `enclosure.type` item fields are interpolated directly into XML te
Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch
CVE-2026-59205
### Summary Pillow's public `ImageCms.ImageCmsTransform.apply(im, imOut)` API can trigger controlled native heap corrup
Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
CVE-2026-59204
### Summary `src/libImaging/Jpeg2KDecode.c:853` accumulates `total_component_width` across every tile in a JPEG2000 imag
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
CVE-2026-59203
### Summary Pillow's EPS parser (PIL/EpsImagePlugin.py) accepts a negative byte count in the %%BeginBinary directive. A
Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
CVE-2026-59200
### Summary `PdfParser.PdfStream.decode()` in Pillow's `PdfParser.py` calls `zlib.decompress()` with the `bufsize` param
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
CVE-2026-59199
### Summary Pillow's public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates
Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
CVE-2026-59198
### Summary Pillow's TGA RLE encoder reads past its row buffer when saving a mode `"1"` image. Adjacent process heap by
Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
CVE-2026-59197
### Summary Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd f
Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability
CVE-2026-50651
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability
CVE-2026-50659
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability
CVE-2026-50525
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability
CVE-2026-50528
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability
CVE-2026-50648
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET