A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an...
CVE-2026-101131
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the
2026-09-29 归档
今日共收录 1279 条安全情报，包含 376 个 CVE，505 篇安全通告，以及 100 篇研究论文。
← 返回归档列表A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected...
CVE-2026-101132
A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function
A flaw was found in GCC. When an application calls the erase_if function on a binary heap...
CVE-2026-102010
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, t
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 -...
CVE-2026-101110
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) quote() instead of rejecting it.
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5...
CVE-2026-101109
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) tag, to be injected into the
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 -...
CVE-2026-101111
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8...
CVE-2026-101108
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.
A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impacts an unknown function of...
CVE-2026-101139
A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impacts an unknown function of the file /admin/sales/in
A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is...
CVE-2026-101105
A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprof
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6...
CVE-2026-100752
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatem
fast-uri vulnerable to authority injection via an unvalidated port in serialize
CVE-2026-84292
### Impact `fast-uri` serializes the `port` component of a URI without validating it. When recomposing the authority, `
jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS
CVE-2026-68497
### Summary `jackson-databind` 3.2.1 deserializes a JSON **string** bound to a `javax.xml.datatype.Duration` or `javax.x
jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution
CVE-2026-19032
### Summary A `java.nio.file.Path` field bound from untrusted JSON reaches `JDKFromStringDeserializer.NioPathHelper.des
jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization
CVE-2026-77310
### Summary CVE-2026-54514 (GHSA-hgj6-7826-r7m5) fixed an eager-DNS-resolution / SSRF issue in jackson-databind's deseri
@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches
CVE-2026-101914
### Impact When using RBAC to apply authentication rules, the exact path (method name) matcher applies a prefix match in
A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client...
CVE-2026-96740
A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console cu
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the...
CVE-2026-101102
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the com
A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the...
CVE-2026-101101
A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of t
A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the...
CVE-2026-101100
A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsM
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-58464
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.