Zabbix 后台延时注入(CVE-2024-22120)
CVE-2024-22120
Zabbix 后台延时注入(CVE-2024-22120)
2026-10-13 归档
今日共收录 1460 条安全情报，包含 709 个 CVE，466 篇安全通告，以及 13 篇研究论文。
← 返回归档列表CrushFTP 认证绕过漏洞（CVE-2024-4040）
CVE-2024-4040
CrushFTP 认证绕过漏洞（CVE-2024-4040）
Alert for CVE-2026-21992
CVE-2026-21992
Alert for CVE-2026-21992
Alert for CVE-2025-61884
CVE-2025-61884
Alert for CVE-2025-61884
Alert for CVE-2025-61882
CVE-2025-61882
Alert for CVE-2025-61882
Alert for CVE-2024-21287
CVE-2024-21287
Alert for CVE-2024-21287
Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
CVE-2026-93433
Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
CVE-2026-108266
Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
CVE-2026-102010
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
Gcc: libstdc++ integer overflow in `new` operator
CVE-2026-95619
Gcc: libstdc++ integer overflow in `new` operator
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
CVE-2026-108267
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
CVE-2026-85013
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shel
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
CVE-2026-107655
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
CVE-2026-26158 · CVE-2026-108119
Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.
CVE-2026-108985
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_z
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.
CVE-2026-108976 · CVE-2026-79992
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has