今日共收录 1886 条安全情报，包含 1062 个 CVE，406 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-18371
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user inte
CVE-2026-16440
In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.
CVE-2026-76166
A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multica
CVE-2026-76164
AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low
CVE-2026-75900
An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() function. The entry guard checks the
CVE-2026-75589
Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time
CVE-2026-72889
Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves
CVE-2026-58088
The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program h
CVE-2026-58087
The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock protec
CVE-2026-58086
As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing
CVE-2026-58085
After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the MAC
CVE-2026-58084
To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the current time for the timer
CVE-2026-58083
While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqu
CVE-2026-58082
The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character output. Some
CVE-2026-58081
Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied outp
CVE-2026-49425
The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first
CVE-2026-49424
The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t. It did n
CVE-2026-75981
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to unauthentica
CVE-2026-49423
When building the iovec array for a received TLS 1.2 CBC record, ktls_ocf_tls_cbc_decrypt() incremented the iovec index
CVE-2026-15780
The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Stored C