今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-18839
An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal
CVE-2026-18411
The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication k
CVE-2026-17583
The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be ed
CVE-2026-15996
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to
CVE-2026-70618
Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user
CVE-2026-70617
Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attac
CVE-2026-70616
boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanentl
CVE-2026-69111
Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers
CVE-2026-68746
Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to
CVE-2026-66881
Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with
CVE-2026-66298
Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger se
CVE-2026-66297
Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev l
CVE-2026-55524
PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs its SSRF check only on
CVE-2026-55523
PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.web_crawl_tools.w
CVE-2026-55522
PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of p
CVE-2026-21766
The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials.
CVE-2026-18958
A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a
CVE-2026-18954
Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might al
CVE-2026-18953
Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp
CVE-2026-17556
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to de