今日共收录 1494 条安全情报，包含 600 个 CVE，479 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-19593
OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user open
CVE-2026-19592
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repos
CVE-2026-19591
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell
CVE-2026-19590
OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations
CVE-2024-7953
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administra
CVE-2024-7952
A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to
CVE-2026-58566
Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentiall
CVE-2026-51956
A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user fr
CVE-2026-51934
Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote at
CVE-2026-51788
An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification
CVE-2026-84270
A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.
CVE-2026-84269
A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path t
CVE-2026-84268
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can caus
CVE-2026-84267
A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to
CVE-2026-84232
A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served wit
CVE-2026-84207
Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticat
CVE-2026-84206
Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allo
CVE-2026-84205
GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against
CVE-2026-84204
GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page a
CVE-2026-84203
Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attacker