In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use...
CVE-2026-74661
In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon work
2026-08-23 归档
今日共收录 968 条安全情报，包含 250 个 CVE，385 篇安全通告，以及 68 篇研究论文。
← 返回归档列表In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix...
CVE-2026-74678
In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb leak in ax88179_tx_
In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in...
CVE-2026-74656
In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib_nhc_update_mtu() f
In the Linux kernel, the following vulnerability has been resolved: net: fix skb length...
CVE-2026-74665
In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP fr
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate...
CVE-2026-74664
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate update replies for mis
In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check...
CVE-2026-74635
In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_curs
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf...
CVE-2026-74634
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resiz
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Remove buffer...
CVE-2026-74647
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Remove buffer from list prior to unm
In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: error...
CVE-2026-74643
In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: error out for zero quota goal
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
CVE-2026-77415
Before JSONata `2.2.1` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to: - overwri
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
CVE-2026-77414
Before JSONata `2.2.1` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to a bypassab
Hydra: hydra.utils.instantiate with untrusted config can lead to code execution
CVE-2026-68508
## Summary `hydra.utils.instantiate()` resolves and calls Python objects from config. If an application passes untruste
JSONata: Arbitrary Code Execution via crafted JSONata expressions
CVE-2026-77413
## Impact Before JSONata `2.2.0` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding
CVE-2026-77354
### Summary An uncontrolled resource consumption vulnerability in `openapi3filter` lets any unauthenticated client forc
Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI leads to RCE)
CVE-2026-59989
## Summary The Volt template compiler in Phalcon generates the PHP for the `join` filter by string-concatenating the fi
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
CVE-2026-76905
### Summary A nil-pointer dereference in `openapi3filter.ConvertErrors` lets any unauthenticated client crash a server
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation
CVE-2026-64679
### Summary Atlantis versions `>= 0.19.8` and `< 0.45.0` did not consistently validate user-controlled `workspace` value
Keystone vulnerable to `graphql.maxTake` bypass with negative `take`
CVE-2026-63421
# Summary The value of `graphql.maxTake` can be bypassed by providing a negative input. This can be used to exceed the d
Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors
CVE-2026-61824
## Summary An Improper Neutralization of Input During Web Page Generation issue in the site extractor component allows
Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username
CVE-2026-63466
## Vulnerability Details **File**: `src/lib/addons/feature-event-formatter-md.ts` **Line**: 355 (in v8.0.1; `format()`