今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-64586
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain bus_reset work on device remo
CVE-2026-64585
In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: kill anchored URBs before freeing net
CVE-2026-64584
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: cancel pending IN work before
CVE-2026-64583
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain func_wake
CVE-2026-19021
A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by thi
CVE-2026-19020
A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unkn
CVE-2026-19019
A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_
CVE-2026-19011
A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packa
CVE-2026-19010
A security vulnerability has been detected in TinyAGI 0.0.20. Impacted is the function processMessage of the file packag
CVE-2026-19009
A weakness has been identified in TinyAGI 0.0.20. This issue affects the function collectFiles of the file packages/core
CVE-2026-19008
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape
CVE-2026-18915
Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research
CVE-2026-18649
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements d
CVE-2026-18597
The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is re
CVE-2026-0637
When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these propert
CVE-2025-14779
The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delet
CVE-2025-13909
The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OT
CVE-2025-13736
When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. Fo
CVE-2025-13394
The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Reque
CVE-2025-12627
The user impersonation flow in WSO2 Identity Server fails to properly manage refresh tokens associated with impersonated