今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-95626
Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero prot
CVE-2026-94251
A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resou
CVE-2026-94243
A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue af
CVE-2026-92001
Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS.
CVE-2026-91999
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.
CVE-2026-91928
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.
CVE-2026-91852
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.
CVE-2026-79616
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.
CVE-2026-73192
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability when usin
CVE-2026-95625
The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binar
CVE-2026-93368
The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' (U
CVE-2026-42801
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation. This v
CVE-2026-31377
An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote
CVE-2026-15027
CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce
CVE-2026-92378
A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Und
CVE-2026-91818
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant pag
CVE-2026-91817
A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded P
CVE-2026-91816
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation del
CVE-2026-91815
Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which l
CVE-2026-91814
A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents