今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-88024
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can c
CVE-2026-88023
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can c
CVE-2026-88022
Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an arra
CVE-2026-68006
An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_
CVE-2026-15419
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can
CVE-2026-15418
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can
CVE-2026-15417
In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to
CVE-2026-88050
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharco
CVE-2026-88049
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks t
CVE-2026-88048
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconne
CVE-2026-88047
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch
CVE-2026-88046
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1
CVE-2026-88045
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.75.
CVE-2026-73699
FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arb
CVE-2026-73698
FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute
CVE-2026-73694
FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd(
CVE-2026-73693
FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authen
CVE-2026-52097
An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the afLaunchUri, _afLaunchLocalUri (u
CVE-2026-88959
Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any au
CVE-2026-88940
knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attac