今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-42808
An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. The host streaming API function {{c
CVE-2026-42807
A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10
CVE-2026-42806
An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior,
CVE-2026-42805
A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug
CVE-2026-42804
A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to
CVE-2026-13745
A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary
CVE-2026-88770
A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The iss
CVE-2026-80354
Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in c
CVE-2026-87804
Rejected reason: no security impact
CVE-2026-82925
The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being deserialized, and derives the ke
CVE-2026-82582
An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized
CVE-2026-81635
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in
CVE-2026-81431
The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during re
CVE-2026-77771
The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its secon
CVE-2026-19840
The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds th
CVE-2026-19439
The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displa
CVE-2026-19436
The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card cou
CVE-2026-85645
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflect
CVE-2026-82079
A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an
CVE-2026-75880
An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excess