今日共收录 1422 条安全情报，包含 510 个 CVE，504 篇安全通告，以及 114 篇研究论文。
← 返回归档列表CVE-2026-51261
Missing mutex synchronization in AudioBuffer::freeSpace() in schreibfaul1 ESP32-audioI2S 3.4.5 creates a race condition
CVE-2026-51254
schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::GetBits() function of the M
CVE-2026-51251
Schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::decode() function of the MP3 de
CVE-2026-67173
Pivotick did not validate the URL scheme of node imagePath values derived from graph data before assigning them to SVG i
CVE-2026-66921
Pivotick’s Markdown node-reference renderer failed to HTML-escape the attacker-controlled nodeName value before interpol
CVE-2026-61487
Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated
CVE-2026-59878
Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthe
CVE-2026-7187
Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionalit
CVE-2026-66919
Pivotick contains a cross-site scripting vulnerability in the inspect and edit node modals. Node labels and descriptions
CVE-2026-66918
Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.svgIcon property before in
CVE-2026-66913
Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An atta
CVE-2026-65882
Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1 - The goto url parameter of the moodle w
CVE-2026-65881
Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1
CVE-2026-62436
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi
CVE-2026-62435
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi
CVE-2026-62434
A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren't regular guest RAM. Thi
CVE-2026-62433
Parts of the DM_OP handling code assumes the caller has provided the required number of buffers for the given operation
CVE-2026-62432
The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct
CVE-2026-62431
The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that
CVE-2026-62430
Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest ch