今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2022-26962
Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=
CVE-2026-89087
The cstruct package before 6.3.0 for OCaml mishandles indexes.
CVE-2026-89054
A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring
CVE-2026-89011
isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a ma
CVE-2026-88061
career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops loca
CVE-2026-84432
Concrete CMS 9 through 9.5.2 did not validate an anti-CSRF token in the Boards custom slot dialog controller (concrete/
CVE-2026-9338
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafte
CVE-2026-9336
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafte
CVE-2026-88060
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-88059
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-88058
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-88057
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-88056
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-88036
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can caus
CVE-2026-88035
A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-
CVE-2026-88034
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can ca
CVE-2026-88033
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can c
CVE-2026-88032
A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources
CVE-2026-88021
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a serv
CVE-2026-87993
The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow V