Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...
CVE-2026-48392
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context
2026-07-29 归档
今日共收录 1422 条安全情报，包含 510 个 CVE，504 篇安全通告，以及 114 篇研究论文。
← 返回归档列表Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary...
CVE-2026-48396
Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the cont
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege...
CVE-2026-48390
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker co
The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions...
CVE-2026-15992
The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.
A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A...
CVE-2026-18107
A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A malicious process insid
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the...
CVE-2026-16496
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful t
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery...
CVE-2026-14869
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTT
The Plugin Organizer plugin for WordPress is vulnerable to SQL Injection via the 'PO_plugin_path'...
CVE-2026-15304
The Plugin Organizer plugin for WordPress is vulnerable to SQL Injection via the 'PO_plugin_path' parameter in versions
datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate
CVE-2026-55390
### Summary When generating models from an XML Schema (`--input-file-type xmlschema`), `datamodel-code-generator` resol
Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability
CVE-2026-32203
## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in Sy
NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass
CVE-2026-52888
# Security Vulnerability Report: Sensitive Data Exposure via SQL Blacklist Bypass ## Summary The `checkSQL()` function
Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape
CVE-2026-50568
`SanitizeFilePath` in `pkg/utils/utils.go` validated that a path stayed under a safe directory by calling `strings.HasPr
Fission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory
CVE-2026-50567
`Unarchive` in `pkg/utils/zip.go` joined each archive entry name with the destination directory via `filepath.Join` and
Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruption
CVE-2026-50570
Fission v1.24.0 added PodSpec safety validation for tenant-facing Environment and Function CRDs (`ValidatePodSpecSafety`
TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated...
CVE-2026-67185
TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary fi
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 APIC frame...
CVE-2026-51275
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 APIC frame parsing function in audiolib
TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers...
CVE-2026-67183
TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust available me
Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that...
CVE-2026-48388
Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in
Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in...
CVE-2026-48372
Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 SYLT synchronized...
CVE-2026-51274
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 SYLT synchronized lyrics parser in audio