今日共收录 1353 条安全情报，包含 493 个 CVE，458 篇安全通告，以及 108 篇研究论文。
← 返回归档列表CVE-2026-45202
Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possib
CVE-2026-45201
Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size
CVE-2026-45199
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a writ
CVE-2026-18409
The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Single Line Text and Paragraph Tex
CVE-2026-76158
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v
CVE-2026-76137
Missing authentication for critical function vulnerability exists in VOCALOID6. Any process running under the same local
CVE-2026-76131
Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to impersonate a legitimate VOCALO
CVE-2026-73267
A flaw was found in the clusterclaims-controller component of multicluster engine (MCE). A tenant with standard permissi
CVE-2026-77392
A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impact
CVE-2026-77391
A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This a
CVE-2026-76157
Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0
CVE-2026-76156
OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenti
CVE-2026-76155
Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain
CVE-2026-43679
This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physi
CVE-2026-20679
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Ta
CVE-2026-16520
Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC
CVE-2026-77113
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to cre
CVE-2026-77646
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulne
CVE-2026-77645
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerabili
CVE-2026-72848
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_d