A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected...
CVE-2026-92992
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown functio
2026-09-18 归档
今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Applications built on MongoDB Entity Framework Core Provider which place a database name in the...
CVE-2026-92757
Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may in
There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library...
CVE-2026-19477
There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application...
CVE-2026-92758
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive
Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on...
CVE-2026-92230
Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container thr
Applications built on MongoDB Entity Framework Core Provider which combine independent encryption...
CVE-2026-92756
Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this prov
Grav CMS vulnerable to remote code execution via .zip file upload
CVE-2026-72819
### Summary A logged-in user can run any command on the server. A settings field can fill itself by calling one of Grav
Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write
CVE-2026-75827
## Affected versions and vulnerable location - Confirmed on grav core at `78ebfc1` (tag 2.0.13). - Sinks: - `system/s
Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)
CVE-2026-74907
**Verified against:** `getgrav/grav` devel branch, `GRAV_VERSION = "2.0.15"`, file `index.php ## Title Unauthenticated
Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion
CVE-2026-72695
# Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion ## Summary A path traversal vulnerab
CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP
CVE-2026-86003
### Summary CoreDNS accepted [RFC 2136](https://datatracker.ietf.org/doc/html/rfc2136) UPDATE messages over DoH, DoH3,
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns
CVE-2026-86000
## Summary soupsieve compiles CSS selector strings with a set of hand-written regular expressions. The shared `IDENTIFI
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)
CVE-2026-85999
## Summary Before tokenizing, `selector_iter` trims leading/trailing whitespace and comments by running two regexes ove
CoreDNS: Unauthenticated memory exhaustion in custom transports
CVE-2026-82399
### Summary CoreDNS parses attacker-controlled DNS section counts before validating them on DNS-over-HTTPS (DoH and DoH
HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service
CVE-2026-81876
### Summary A malformed Smart Health Card (SHC) JWT with `zip: "DEF"` and an empty or truncated DEFLATE payload causes `
HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service
CVE-2026-81875
### Summary `SHCParser` inflates compressed Smart Health Card JWT payloads into memory without a decompressed-size limit
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning
CVE-2026-81871
### Summary The OTLP log gRPC exporter loads TLS settings from environment variables but does not apply them when creat
Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)
CVE-2026-81516
## Summary Steeltoe's Consul discovery client parses the `secure` metadata field on each registered service instance us
Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)
CVE-2026-81515
## Summary Steeltoe's Eureka discovery client deserializes the registry response as a single unit. If any registered in
Jupyter Server: 5xx request logging leaks token-bearing Referer header values
CVE-2026-86049
### Summary When a request returns a 500, `jupyter_server/log.py` logs a small JSON block of request headers. The Ref