今日共收录 1784 条安全情报，包含 814 个 CVE，581 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-77240
WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, the profiles_update row-level security
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
多款Huawei路由器信息泄露漏洞
CVE-2026-81181
SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, the password authentication flow for pro
CVE-2026-63199
Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 until 0.54.0-rc.0, the
CVE-2026-91127
File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applic
CVE-2026-84975
PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuT
CVE-2026-77616
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's
CVE-2026-46655
virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits
CVE-2026-77339
Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listen
CVE-2026-61682
kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior t
CVE-2026-16514
gptp_mi_qualify_announce() in subsys/net/l2/ethernet/gptp/gptp_mi.c walks the Path Trace TLV of a received IEEE 802.1AS
CVE-2026-16512
gptp_handle_msg() in subsys/net/l2/ethernet/gptp/gptp.c dereferenced the gPTP header returned by GPTP_HDR() and switched
CVE-2026-62282
OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack int
CVE-2026-93597
ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and
CVE-2026-93894
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type
CVE-2026-88097
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
CVE-2026-64847
### Impact AnyIO starts process-pool workers with stderr connected to a pipe but never drains that pipe. The worker redi
Firefox browsers