JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores...
CVE-2026-111330
JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as
2026-10-16 归档
今日共收录 833 条安全情报，包含 0 个 CVE，434 篇安全通告，以及 100 篇研究论文。
← 返回归档列表ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability...
CVE-2026-111320
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attack
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows...
CVE-2026-111279
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exh
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute...
CVE-2026-110921
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside
Driftregion iso14229 before 0.10.1 contains an integer wraparound in...
CVE-2026-111282
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthent
NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated...
CVE-2026-111278
NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form prot
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in...
CVE-2026-111270
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp becaus
unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip...
CVE-2026-111274
unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an in
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string()...
CVE-2026-111269
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalu
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile:...
CVE-2026-111271
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_
nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in...
CVE-2026-111275
nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim()
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of...
CVE-2026-111277
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that all
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the...
CVE-2026-111312
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id]
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
CVE-2026-110922
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute...
CVE-2026-110919
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
CVE-2026-110920
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code insi
Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction...
CVE-2026-111284
Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authentic
LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote()...
CVE-2026-111272
LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar...
CVE-2026-111273
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable th
Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
CVE-2026-110918
Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted