今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-103045
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun
CVE-2026-103044
XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension a
CVE-2026-103043
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex d
CVE-2026-103042
LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_tra
CVE-2026-91191
The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic.
CVE-2026-84409
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores por
CVE-2026-74225
U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID
CVE-2026-74222
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget i
CVE-2026-74221
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processin
CVE-2026-74220
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attack
CVE-2026-71974
U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to valida
CVE-2026-71973
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when alloca
CVE-2026-71972
U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in dr
CVE-2026-71971
U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defra
CVE-2026-71302
The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. T
CVE-2026-71189
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by
CVE-2026-69662
The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.
CVE-2026-102771
A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailC
CVE-2026-102621
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of
CVE-2026-94952
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware