Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in...
CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a me
2026-09-02 归档
今日共收录 1494 条安全情报，包含 600 个 CVE，479 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a...
CVE-2026-84325
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging s
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the...
CVE-2026-84482
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDo
Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to...
CVE-2026-84324
Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outs
WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass...
CVE-2026-84483
WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows una
Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote...
CVE-2026-84323
Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromise
WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For...
CVE-2026-84476
WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the...
CVE-2026-84423
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource
AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the...
CVE-2026-84208
AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin's region
WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that...
CVE-2026-84478
WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that allows unauthenticated a
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS...
CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi
A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects...
CVE-2026-84289
A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function list_tools
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...
CVE-2026-76851
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code e
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due...
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a...
CVE-2026-84641
A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap con
The values of the mail.allowed_attachment_hostnames advanced config setting were used in a...
CVE-2026-84642
The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without es
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used....
CVE-2026-84639
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was
A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the...
CVE-2026-84288
A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.promp
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise...
CVE-2026-19118
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote
Malicious calendar invitations could use file URI attachments to launch local or network-hosted...
CVE-2026-84637
Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows,