今日共收录 1506 条安全情报，包含 770 个 CVE，368 篇安全通告，以及 83 篇研究论文。
← 返回归档列表CVE-2026-66486
GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When list
CVE-2026-66485
GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function us
CVE-2026-66484
GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar arch
CVE-2026-65948
UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: UnixAuth is NOT a recommended option f
CVE-2026-65945
Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0,
CVE-2026-65942
TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0. Users are recommended to upgrade to v
CVE-2026-61899
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets v
CVE-2026-59087
A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote
CVE-2026-55814
Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to upgrade to version
CVE-2026-55799
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgra
CVE-2026-44416
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0. U
CVE-2026-42537
Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0
CVE-2026-40920
Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are recommended to upgrade
CVE-2026-32227
SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recommended to upgrade to v
CVE-2026-28672
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. Thi
CVE-2026-66915
Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.6.7 - An unauthenticated attacker could execute ar
CVE-2026-44630
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to caus
CVE-2026-19404
A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operati
CVE-2026-66411
DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unaut
CVE-2026-66410
Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or alt