今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2025-13166
The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered us
CVE-2026-91851
Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission flag. Da
CVE-2026-91846
Affected versions of MISP allow a collection element to be created from a bare UUID without consistently checking whethe
CVE-2026-91826
Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to
CVE-2026-91825
Affected versions of MISP fail to authorize a submitted sharing group in a specific event-edit path. The vulnerable lo
CVE-2026-91782
A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynre
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_inde
CVE-2026-91780
A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file b
CVE-2026-91779
A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of
CVE-2026-87730
Rejected reason: this is rejected
CVE-2026-80217
Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and acce
CVE-2026-77853
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 a
CVE-2026-76159
Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions bef
CVE-2026-75092
A privilege escalation flaw was found in the scan_mysql actor of leapp-upgrade-el9toel10 (provided by leapp-repository).
CVE-2026-91819
Affected versions of MISP rely on CakePHP request-method override processing in a way that can disable CSRF and form-sec
CVE-2026-91778
In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a w
CVE-2026-91091
A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_node_list_insert_child of
CVE-2026-91090
A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf_node_activate_ex of the f
CVE-2026-91089
A vulnerability was found in GPAC up to f1219cde. Impacted is the function gf_node_get_name_and_id of the file scenegrap
CVE-2026-91088
A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gf_url_concatenate_ex of the file