Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets...
CVE-2026-5857
Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking
2026-08-07 归档
今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。
← 返回归档列表ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in...
CVE-2026-67688
ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module.
SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code...
CVE-2026-67689
SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `or
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate...
CVE-2026-67687
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/rol
An authentication issue was addressed with improved state management. This issue is fixed in...
CVE-2026-65400
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS
sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php...
CVE-2026-63725
sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php around line 388 builds a ta
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET...
CVE-2026-68480
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt in
The DataPress (Dataverse Integration) WordPress plugin before 2.91 does not properly restrict...
CVE-2026-5336
The DataPress (Dataverse Integration) WordPress plugin before 2.91 does not properly restrict access to its template ren
Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm2m-tlv.c ignores its...
CVE-2026-5855
Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer lengt
Contiki-NG's DNS/mDNS resolver skip_name() in os/services/resolv/resolv.c walks DNS wire-format...
CVE-2026-5856
Contiki-NG's DNS/mDNS resolver skip_name() in os/services/resolv/resolv.c walks DNS wire-format name labels with no pack
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
CVE-2026-19172
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the rende
llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read...
CVE-2026-43628
llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sample
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...
CVE-2026-19174
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code insi
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
CVE-2026-19167
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the rende
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
CVE-2026-19171
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially per
Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write...
CVE-2026-41861
Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker...
CVE-2026-19173
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the r
Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed...
CVE-2026-19177
Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who
llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache...
CVE-2026-43629
llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path whe
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the...
CVE-2026-43631
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-se