BIG-IP has a vulnerability where an authenticated user of any role may be able to create...
CVE-2026-66842
BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts th
2026-09-03 归档
今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch(...
CVE-2026-78222
A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch() can crash an NGINX wo
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation...
CVE-2026-12704
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo fi
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
CVE-2026-75931
### Impact `fast-uri` canonicalizes a host to its ASCII form only when the input carries an explicit scheme. When `reso
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
CVE-2026-75975
### Impact `fast-uri` does not validate the complete RFC 3986 grammar for bracketed IPv6 literals, so a malformed liter
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
CVE-2026-76172
### Impact `fast-uri` decodes percent-encoded characters in the scheme component with the legacy global `unescape()` an
NLTK: Default ENFORCE=False Disables All pathsec Security Controls
CVE-2026-62388
NLTK's pathsec.py security module defaults to ENFORCE=False (line 24), which means all 8 security validation functions o
xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
CVE-2026-83610
## Summary An `EntityReference` node can be created with an invalid, attacker-controlled name through `Document.createE
Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown
CVE-2026-76098
## Summary Mistune v3.3.2 is vulnerable to a Denial of Service (DoS) attack via uncontrolled recursion in the HTML rende
fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count
CVE-2026-16732
## Impact The fix for [CVE-2026-3635](https://www.cve.org/CVERecord?id=CVE-2026-3635) ([GHSA-444r-cwp2-x5xf](https://gi
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto
Mozilla Foundation
Mozilla Foundation
Accessibility Policy
Accessibility Policy
Create an Account
Create an Account
Instructions for subscribing to email notifications
Instructions for subscribing to email notifications
Product Security Home
Product Security Home
Security Bulletins
Security Bulletins