今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-73253
Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildca
CVE-2026-73251
Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server t
CVE-2026-72847
broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are c
CVE-2026-72844
The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value bein
CVE-2026-63495
Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c
CVE-2026-63388
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in b
CVE-2026-63387
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer over
CVE-2026-63385
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in
CVE-2026-63384
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion
CVE-2026-63383
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuff
CVE-2026-63382
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsi
CVE-2026-63381
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c wh
CVE-2026-63380
Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c
CVE-2026-63379
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in
CVE-2026-54625
django CMS is a content management system powered by Django. Prior to 5.0.8 and in 5.1.0a1, the django CMS page cache in
CVE-2026-54623
django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0
CVE-2026-53425
Insufficient Verification of Data Authenticity vulnerability in dropbox samly allows an attacker to establish an authent
CVE-2026-53424
Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject
CVE-2026-2334
An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-s
CVE-2026-77176
A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection,