今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-53585
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing
CVE-2026-53584
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing
CVE-2026-53583
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing
CVE-2026-53569
Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whitelisted toggle_like and mark_a
CVE-2026-50190
Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in `application/front/c
CVE-2026-49996
SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the Se
CVE-2026-46537
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-46536
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-46535
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-46534
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-46533
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-43678
An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 1
CVE-2026-15743
Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The _serve_static
CVE-2026-77036
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayContro
CVE-2026-77031
A vulnerability has been found in Tenda CH22 1.0.0.1. The affected element is the function formcreateFileName of the fil
CVE-2026-76641
Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by p
CVE-2026-73259
Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can send a crafted percent-enco
CVE-2026-73258
Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage retur
CVE-2026-73255
Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can control an SSI-enabled file c
CVE-2026-73254
Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can create a file with an HTML pa