今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。
← 返回归档列表CVE-2026-75548
The affected Ebyte device web management interface does not restrict the interface from being rendered within an extern
CVE-2026-75417
A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the get_arrchildid() function within applicat
CVE-2026-75339
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload
CVE-2026-73839
Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the r
CVE-2026-71396
Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.
CVE-2026-68967
Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that
CVE-2026-67560
Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A
CVE-2026-61783
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. I
CVE-2026-5706
In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to s
CVE-2026-54084
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. I
CVE-2026-44629
Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one
CVE-2026-38350
An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows atta
CVE-2026-38349
An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attacke
CVE-2026-38348
An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denia
CVE-2026-38346
An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attacke
CVE-2026-18965
PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on th
CVE-2026-18717
ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker
CVE-2026-17610
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This
CVE-2026-81931
Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 al
CVE-2026-81893
A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an e