今日共收录 1637 条安全情报，包含 801 个 CVE，449 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-49846
libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks's HTTP re
CVE-2026-48496
OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages
CVE-2026-45056
matrix-sdk-crypto is a no-network-IO implementation of a state machine that handles end-to-end encryption for Matrix cli
CVE-2026-44715
OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticat
CVE-2026-81918
Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A us
CVE-2026-81917
Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the
CVE-2026-81907
Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSRF) in the Express "Clear Entries" function
CVE-2026-68535
Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's vali
CVE-2026-54174
melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to me
CVE-2026-54166
Shelf is a platform for tracking physical assets. Prior to version 1.20.3, authenticated users with the `asset:import` p
CVE-2026-54165
Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click st
CVE-2026-49865
Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain a server-side request forgery vulner
CVE-2026-49439
OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoin
CVE-2026-48490
ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in
CVE-2026-47773
ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missin
CVE-2026-45057
matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the `matri
CVE-2026-89773
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transit
CVE-2026-89771
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring buffe
CVE-2026-89770
In the Linux kernel, the following vulnerability has been resolved: iomap: don't free integrity payload that doesn't ex
CVE-2026-89769
In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_