A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function...
CVE-2026-16764
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file do
2026-07-24 归档
今日共收录 841 条安全情报，包含 0 个 CVE，432 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who...
CVE-2026-16804
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the rende
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As...
CVE-2026-6924
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers g
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker...
CVE-2026-50039
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corru
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network...
CVE-2026-50103
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to cra
An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type...
CVE-2026-52439
An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the p
The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate...
CVE-2026-49035
The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execu
A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a...
CVE-2026-50032
A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to
FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video...
CVE-2026-65703
FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows rem
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows...
CVE-2026-21653
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forger
Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects...
CVE-2026-15967
Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2
An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process...
CVE-2026-12353
An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly se
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or...
CVE-2026-15630
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any
Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where...
CVE-2026-39155
Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-15968
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Tr
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the...
CVE-2026-65705
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that all
FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect...
CVE-2026-65706
FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allo
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows allows capec...
CVE-2026-21655
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows allows capec-586. This issue affec
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue...
CVE-2026-34496
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before
Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads...
CVE-2026-63765
Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unau