In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored....
CVE-2026-59643
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affect
2026-08-03 归档
今日共收录 797 条安全情报，包含 119 个 CVE，373 篇安全通告，以及 59 篇研究论文。
← 返回归档列表In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by...
CVE-2026-59649
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issu
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self...
CVE-2026-59645
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. T
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count....
CVE-2026-59647
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when...
CVE-2026-59642
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked...
CVE-2026-59646
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This is
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero...
CVE-2026-59639
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue al
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from...
CVE-2026-15055
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also a
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before...
CVE-2026-12185
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This i
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default...
CVE-2026-59638
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in.
A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some...
CVE-2026-18581
A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of th
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to...
CVE-2026-3245
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution.
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N...
CVE-2026-18577
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions throu
Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA)...
CVE-2026-68582
Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA) vulnerability in the task-col
ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with...
CVE-2026-67356
ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowin
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection...
CVE-2026-68580
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across AL
ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP...
CVE-2026-68578
ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine p
Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management...
CVE-2026-68581
Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and
ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP...
CVE-2026-67357
ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP get_server_settings tool that
better-auth passkey versions before 1.4.0 contain an insecure direct object reference...
CVE-2025-71400
better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey delet