Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose...
CVE-2026-70105
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a networ
2026-08-21 归档
今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and...
CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and applied by TweetTokeniz
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-72858
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian...
CVE-2026-77643
A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and be
Authorization bypass through user-controlled key in Microsoft Partner Center allows an...
CVE-2026-69558
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to...
CVE-2026-69855
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information o
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached...
CVE-2026-77642
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected s
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to...
CVE-2026-69543
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose...
CVE-2026-69519
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a networ
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny...
CVE-2026-55015
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to...
CVE-2026-66800
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to...
CVE-2026-69419
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a net
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to...
CVE-2026-55013
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locall
Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement
CVE-2026-67447
## Summary Mailpit's SMTP DATA reader enforces the configured `MaxMessageSize` only after `bufio.Reader.ReadBytes('\n')
gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
CVE-2026-55451
### Impact `js2i18next()` is vulnerable to prototype pollution. When converting translations, it splits nested keys on
Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets
CVE-2026-63179
### Impact Affected versions of Winter CMS allow authenticated backend users with the following permissions to disclose
netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields
CVE-2026-61827
We don't enforce any limits for the encoded variable lengths that are used for fields. As the remote peer controls these
netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary
CVE-2026-63124
## Summary `io.netty.incubator:netty-incubator-codec-bhttp` can enter a non-terminating parse loop when a known-length
netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash
CVE-2026-61799
## Summary `io.netty.incubator:netty-incubator-codec-bhttp` uses attacker-controlled Binary HTTP variable-length intege
netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages
CVE-2026-61798
## Summary `io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl` exposes raw HPKE private key bytes i