In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra -...
CVE-2026-80575
In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from us
2026-08-27 归档
今日共收录 918 条安全情报，包含 88 个 CVE，417 篇安全通告，以及 120 篇研究论文。
← 返回归档列表In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path...
CVE-2026-80565
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_a
In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use...
CVE-2026-80556
In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmci_remove
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 -...
CVE-2026-80569
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size t
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate...
CVE-2026-80573
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths ifor
asyncssh has SCP Path Traversal to Arbitrary File Write
CVE-2026-54591
| | | |---|---| | Product | asyncssh (all versions through 2.23.0) | | Related | CVE-2019-6111 (same class in OpenSSH) |
asyncssh has an incomplete fix for CVE-2026-45309 — AuthorizedKeysFile %u still escapes the intended directory via a leading ~ (and weakly via ${ENV}) username substitution
CVE-2026-54590
**Incomplete fix for CVE-2026-45309 (GHSA-g794-3fmp-753h).** The 2.23.0 guard that sanitises the SSH username before `
cakephp/debug_kit: MailPreview contains unsafe reflection
CVE-2026-54614
### Impact The `MailPreview` feature of debugkit is vulnerable to arbitrary constructor execution. For an application t
AsyncHttpClient stores cookie for an unrelated domain (cookie tossing) via ThreadSafeCookieStore
CVE-2026-55688
### Impact A **cookie tossing / cookie injection** issue (CWE-1275). `ThreadSafeCookieStore` stored a cookie under the
Wasmtime has a leak in WASIp1 `fd_renumber` implementation
CVE-2026-54786
### Impact Wasmtime's native implementation of WASIp1 suffers from a leak in the `fd_renumber` function where the file
@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys
CVE-2026-54511
`@logtape/syslog` contains two related output-encoding bugs in the structured data formatting code. Both only affect dep
IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries
CVE-2026-54550
### Summary IzPack's `UnpackerBase.unpack()` resolves pack-file target paths without any canonical-path or directory-co
kas Persistently Disables SSH Host Key Checking
CVE-2026-54548
### Summary kas persistently disables SSH host key checking for the invoking user when internal SSH key setup is trigge
Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS
CVE-2026-54553
## Summary Affected versions of Starlette-Admin prior to 0.16.1 do not properly validate user-supplied sort and search
http4s has HTTP/2 Denial of Service with Ember Backend
CVE-2026-54556
### Summary http4s 0.23.x and 1.0 servers running ember with http2 enabled are vulnerable to a denial of service attack
Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`
CVE-2026-54356
### Summary Budibase 3.39.7 allows a low-privilege authenticated published-app user with the built-in BASIC role to obta
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto