今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-85445
MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts t
CVE-2026-85444
MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions
CVE-2026-85442
MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allowing u
CVE-2026-85441
MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>.
CVE-2026-85439
MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitD
CVE-2026-85436
MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that all
CVE-2026-85432
MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated att
CVE-2026-85431
MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge
CVE-2026-85429
MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it fr
CVE-2026-85427
MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated at
CVE-2026-85378
A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61
CVE-2026-85241
A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of th
CVE-2026-85225
A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code o
CVE-2026-70178
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
CVE-2026-69857
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov
CVE-2026-65818
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
CVE-2026-62906
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att
CVE-2026-18330
A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who capt
CVE-2026-18167
A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is e
CVE-2026-64200
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results