今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-82357
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An ob
CVE-2026-71542
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio
CVE-2026-71426
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio
CVE-2026-70650
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio
CVE-2026-56661
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to
CVE-2026-55252
OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes
CVE-2026-55251
NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to
CVE-2026-54049
Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and versions 25.0 to before
CVE-2026-53964
Document Merge Service is a document template merge service providing an API to manage templates and merge them with giv
CVE-2026-14984
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote u
CVE-2026-14983
Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticat
CVE-2026-103484
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbit
CVE-2026-102671
The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default.
CVE-2026-102670
Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it.
CVE-2026-102669
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.
CVE-2026-102668
The Joyland AI app accepts any TLS certificates from any server without validation.
CVE-2026-102667
Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Withou
CVE-2026-102666
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to acce
CVE-2026-100251
Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay
CVE-2026-8618
A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insuffic