今日共收录 1784 条安全情报，包含 814 个 CVE，581 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2019-25776
Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrar
CVE-2026-93764
Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level enc
CVE-2026-93763
A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that
CVE-2026-93761
An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library ma
CVE-2026-93760
Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that
CVE-2026-93759
Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes it to the d
CVE-2026-93753
deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function that fails to properl
CVE-2026-93752
CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to valida
CVE-2026-93751
uri-js through 4.4.1 contains an improper UTF-8 decoding vulnerability in pctDecChars() that decodes invalid and overlon
CVE-2026-93750
http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the _varyMatches() function that fails t
CVE-2026-93749
source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attacke
CVE-2026-93748
http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-s
CVE-2026-93432
A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a sub-template, it fails
CVE-2026-92768
A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine (VM
CVE-2026-92747
A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running p
CVE-2026-92745
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process met
CVE-2026-91127
File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applic
CVE-2026-85058
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client-controlled Last W
CVE-2026-84992
md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt()
CVE-2026-84975
PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuT