今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-86514
A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txt
CVE-2026-86513
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function Tr
CVE-2026-86512
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/M
CVE-2026-86511
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDe
CVE-2026-75811
Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify har
CVE-2026-75810
Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing
CVE-2026-75809
Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and d
CVE-2026-75808
Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-serv
CVE-2026-19397
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby use
CVE-2026-18023
Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose
CVE-2026-16006
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user t
CVE-2026-16005
Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a craft
CVE-2026-16004
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary P
CVE-2026-16003
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process i
CVE-2026-12962
A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local
CVE-2026-82710
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage_rules allows a maliciou
CVE-2026-76977
SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated at
CVE-2026-76971
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker
CVE-2026-76968
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacke
CVE-2026-76967
SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during