今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-73086
nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the na
CVE-2026-73085
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/
CVE-2026-73084
Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoi
CVE-2026-73083
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine l
CVE-2026-73082
Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mc
CVE-2026-73081
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline
CVE-2026-72971
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.
CVE-2026-71390
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur
CVE-2026-71389
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a
CVE-2026-71387
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the
CVE-2026-71386
is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the context o
CVE-2026-71383
is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker coul
CVE-2026-71331
Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an un
CVE-2026-70355
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
CVE-2026-70354
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-70348
Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attac
CVE-2026-70347
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70346
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70345
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70344
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.