今日共收录 1637 条安全情报，包含 801 个 CVE，449 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-80931
In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C bl
CVE-2026-80930
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout
CVE-2026-80929
In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad_pid" entry from pid_table[] t
CVE-2026-80928
In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack_file_send_sigiotask()
CVE-2026-80927
In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tk_get_aux_t
CVE-2026-80926
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in oplock break notificat
CVE-2026-79035
A reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component of Zeta Marketing Platform (ZMP) v1.0
CVE-2026-78546
Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: bef
CVE-2026-68526
Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog controller (concret
CVE-2026-54135
AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4.12 have a
CVE-2026-52630
SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEdito
CVE-2026-49462
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom
CVE-2026-89329
A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this
CVE-2026-81910
Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection (SSTI) in Theme Customizer via Unvalidated
CVE-2026-79396
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores sta
CVE-2026-79394
An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camer
CVE-2026-79393
A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon i
CVE-2026-79362
Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until = 6.2.0 until < 6.2.6. An authentic
CVE-2026-71646
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacke
CVE-2026-62140
Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 versions.