Elixir protobuf: Unbounded recursion depth in embedded-message decoding
CVE-2026-54451
Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attack
2026-09-18 归档
今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表OpenDDS: out-of-bounds `rd_ptr` dereference in `RtpsSampleHeader::init` — triggered by malformed RTPS submessage, remotely exploitable denial of service
CVE-2026-52836
OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior
NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode
CVE-2026-54446
NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensi
Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults
CVE-2026-54053
Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import impl
WireGuard Portal: Authenticated WebSocket /api/v0/ws broadcasts all peers' and interfaces' traffic stats to every user (missing per-user authorization)
CVE-2026-54551
WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.
rabbitmq-c: size_t underflow in AMQP frame length computation leads to out-of-bounds read
CVE-2026-44235
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an unders
rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max
CVE-2026-44236
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an unders
batman-adv: dat: atomically update mac addresses
CVE-2026-93204
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses W
i3c: master: Fix recursive locking during device registration
CVE-2026-93202
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device re
dm-pcache: validate seg_id fields from persistent memory
CVE-2026-93201
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent m
i3c: master: Fix use-after-free of master->this
CVE-2026-93200
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master->this sy
i3c: master: Do not treat master device as a duplicate target
CVE-2026-93199
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplic
dm-pcache: validate the persisted dirty_tail chain at load
CVE-2026-93198
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persisted dirty_tail chain
drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel
CVE-2026-93195
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Support unregistering
drm/rockchip: dw_dp: Release core resources
CVE-2026-93194
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Release core resources Core r
drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup
CVE-2026-93193
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Fix OF node reference le
drm/v3d: Clear queue->active_job when v3d_fence_create() fails
CVE-2026-93192
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Clear queue->active_job when v3d_fence_cre
smack: fix incorrect task context in smack_msg_queue_msgrcv
CVE-2026-93191
In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smack_msg_queu
platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
CVE-2026-93190
In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: Reject out-of-bound
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
CVE-2026-93189
In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to preven