今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autof
CVE-2026-101258
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFE
CVE-2026-96589
When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access a
CVE-2026-96580
Gitea expanded a workflow's static `strategy.matrix` into its full Cartesian product without a size limit when creating
CVE-2026-96404
When Gitea's web installer is reachable against a database that already contains users, such as after `INSTALL_LOCK` has
CVE-2026-96400
With `[migrations] ALLOWED_DOMAINS` set to a matching entry such as `*` or a hostname wildcard, Gitea's migration URL va
CVE-2026-96399
A repository's external issue tracker regular expression containing alternating capture groups could produce invalid sli
CVE-2026-95112
When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" o
CVE-2026-95106
Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. Gi
CVE-2026-94205
Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather t
CVE-2026-94114
Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker-controlled classes
CVE-2026-89430
Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was
CVE-2026-79960
When a push was authenticated with a deploy key, Gitea recorded the repository owner as the pusher, so permission checks
CVE-2026-79818
A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circum
CVE-2026-79817
A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manage
CVE-2026-79816
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote a
CVE-2026-79815
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote a
CVE-2026-79814
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a loc
CVE-2026-79813
A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow
CVE-2026-79812
A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exp