今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-52484
An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code
CVE-2026-48785
Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix
CVE-2026-40058
CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability on
CVE-2026-39040
BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Scripting (XSS) via the component Trufflebox UI (tru
CVE-2026-39039
In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and se
CVE-2026-39038
BharatMLStack up to and including v1.3.0 is vulnerable to Cross Site Scripting (XSS) in the component Trufflebox UI (tru
CVE-2026-18115
Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit_user_properties permissions on the REST API user write endpoi
CVE-2026-18113
In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing
CVE-2026-13210
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 1
CVE-2026-12910
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 1
CVE-2026-12752
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) atta
CVE-2026-12751
IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML cod
CVE-2026-12750
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authent
CVE-2026-12749
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authent
CVE-2026-12742
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted
CVE-2026-12728
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
CVE-2026-12667
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
CVE-2026-12666
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
CVE-2026-12358
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of
CVE-2026-12355
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1