Bluetooth: hci_sync: Fix accept list UAF during suspend
CVE-2026-80762
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix accept list UAF during sus
2026-09-05 归档
今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Bluetooth: ISO: zero the sockaddr before returning it in getname
CVE-2026-80761
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning
Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255
CVE-2026-80760
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCI_CMD_SYNC params_len abo
Bluetooth: hci_aml: validate firmware segment lengths
CVE-2026-80759
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_aml: validate firmware segment lengt
futex: Avoid private hash use-after-free on final put
CVE-2026-80758
In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final p
Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints
CVE-2026-85700
Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authentic
Turso through 0.8.0-pre.8 Out-of-Bounds Read Denial of Service
CVE-2026-85698
Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attack
Documenso 2.17.0 PDF Route Ignores Document Visibility
CVE-2026-85697
Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document vi
SadTalker OS Command Injection via Audio Filename
CVE-2026-85696
SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are
FastChat Unauthenticated Worker Registration SSRF and Model Spoofing
CVE-2026-85695
FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated at
MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url
CVE-2026-85691
MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that
Plandex 2.2.1 Path Traversal via ApplyFiles
CVE-2026-85690
Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files ou
llmware 0.4.6 SQL Injection via unescaped filter values
CVE-2026-85689
llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filt
TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer
CVE-2026-85688
TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-c
surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server
CVE-2026-85687
surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /p
AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill
CVE-2026-85685
AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary
marker through 2.0.0 Path Traversal via upload filename
CVE-2026-85684
marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitiz
aider 0.86.2 Remote Code Execution via .aider.conf.yml
CVE-2026-85674
aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is la
tokenizers BpeBuilder Buffer Overflow via merge token
CVE-2026-85670
tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/
potpie through 2.0.0 Missing Ownership Check via code-changes sync
CVE-2026-85669
potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpo