今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-77093
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance
CVE-2026-77090
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software custome
CVE-2026-65200
The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three
CVE-2026-65199
openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privil
CVE-2026-65198
Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker wh
CVE-2026-65197
H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/co
CVE-2026-53420
Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalat
CVE-2026-53418
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an
CVE-2026-4869
A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compress
CVE-2026-18228
HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved ma
CVE-2026-12656
A denial-of-service security issue exists in the affected product and version. The security issue stems from improper ha
CVE-2026-12655
A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserve
CVE-2026-11731
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with a
CVE-2026-11730
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker h
CVE-2026-109523
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d
CVE-2026-109522
A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9
CVE-2026-109521
A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999
CVE-2026-108185
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to con
CVE-2026-108184
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an info
CVE-2026-107460
Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-shee