今日共收录 1598 条安全情报，包含 743 个 CVE，444 篇安全通告，以及 115 篇研究论文。
← 返回归档列表CVE-2026-58157
Apache Traffic Server can reuse server sessions and tunnels improperly, exposing data across client connections. This i
CVE-2026-50622
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoi
CVE-2026-23904
Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A re
CVE-2026-18207
A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group m
CVE-2026-18201
Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discov
CVE-2026-65325
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the n
CVE-2026-65324
Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses, letting a slow client
CVE-2026-64557
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_
CVE-2026-64556
In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_exe
CVE-2026-58156
Apache Traffic Server mis-parses ports in URLs and userinfo, allowing port-based access-control bypass. This issue affe
CVE-2026-58154
Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affe
CVE-2026-58153
Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting H
CVE-2026-58152
Apache Traffic Server mishandles integers while decoding HPACK/XPACK headers, corrupting memory. This issue affects Apa
CVE-2026-58151
Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and flow-control. This
CVE-2026-13425
The Database for CF7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Array Form Field Values in al
CVE-2026-11973
The WP-Lister Lite for eBay plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in a
CVE-2026-35226
An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same n
CVE-2026-33930
Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handl
CVE-2026-24033
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server.
CVE-2026-22068
Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: fr