今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-45524
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This coul
CVE-2026-28667
In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lea
CVE-2026-28648
In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of priv
CVE-2026-28647
In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error i
CVE-2026-28641
In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission byp
CVE-2026-28640
In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass du
CVE-2026-28625
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local
CVE-2026-105712
gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted arch
CVE-2026-105646
Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessi
CVE-2026-105645
Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner
CVE-2026-105644
Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were store
CVE-2026-105643
Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could by
CVE-2026-105642
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost c
CVE-2026-105634
Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows a
CVE-2026-105387
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87b
CVE-2026-105386
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer
CVE-2026-104714
Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Stru
CVE-2026-104713
Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is r
CVE-2026-104712
Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an