Adaptive-Shot Hybrid Quantum Anomaly Detection for Tactile Internet Security: Reliability-Aware Measurement Allocation Under Resource Constraints

Tactile Internet (TI) security analytics must balance reliable thresholded decisions with constrained computational and

历史摘要 · 未重新核验 · arXiv cs.CR

Bounded Provisional Visibility: Controlling Poisoning Exposure in Continuously Ingested RAG Vector Stores

Continuous ingestion can expose new retrieval-augmented generation (RAG) content to retrieval before vetting completes,

历史摘要 · 未重新核验 · arXiv cs.CR

Online AutoML: Evaluating Poisoning Attacks on Adversarial Training Defense Strategy in IoT Networks

Machine learning (ML)-powered poisoning attack vectors are adversarial maneuvers whereby an attacker intentionally inser

历史摘要 · 未重新核验 · arXiv cs.CR

SimpleMark: Fast Multi-Bit Text Watermarking under f -Divergence Constraints

We introduce a framework for multi-bit text watermarking with security defined directly through $f$-divergence from the

历史摘要 · 未重新核验 · arXiv cs.CR

Visual Grounding Safety in Vision-Language Models

Vision-language models (VLMs) are increasingly trained to generate structured outputs like points and bounding boxes tha

历史摘要 · 未重新核验 · arXiv cs.CR

Beyond Monolithic Perturbation: Heterogeneous Mechanism Design for Multi-Attribute Metric Differential Privacy

Multi-attribute user records are inherently heterogeneous, often combining continuous, categorical, and binary attribute

历史摘要 · 未重新核验 · arXiv cs.CR

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploi...

CVE-2026-59347

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local

历史摘要 · 未重新核验 · NVD

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can...

CVE-2026-103870

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as dir

历史摘要 · 未重新核验 · NVD

A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for every token download in that...

CVE-2026-103869

A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-l

历史摘要 · 未重新核验 · NVD

A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker....

CVE-2026-103868

A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one

历史摘要 · 未重新核验 · NVD

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via registration metadata in all versions up to...

CVE-2026-102173

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site

历史摘要 · 未重新核验 · NVD

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an una...

CVE-2026-19572

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, w

历史摘要 · 未重新核验 · NVD

Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write o...

CVE-2026-83742

Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows pla

历史摘要 · 未重新核验 · NVD

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a ...

CVE-2026-83540

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired f

历史摘要 · 未重新核验 · NVD

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip op...

CVE-2026-81535

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel open

历史摘要 · 未重新核验 · NVD

A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width * height size compu...

CVE-2026-106061

A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it a

历史摘要 · 未重新核验 · NVD

A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiri...

CVE-2026-106471

A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Veri

历史摘要 · 未重新核验 · NVD

An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read arbitrary files on the host system. By sending a crafted...

CVE-2026-105324

An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read

历史摘要 · 未重新核验 · NVD

In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access abuse resulting in privilege escalat...

CVE-2026-102478

In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protectio

历史摘要 · 未重新核验 · NVD

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the ...

CVE-2026-97680

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inj

历史摘要 · 未重新核验 · NVD