今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-113657
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi
CVE-2026-113656
ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheCMS Form add-on, its
CVE-2026-113655
ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an authenticated editor with legitim
CVE-2026-113654
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi
CVE-2026-113653
ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, viewRole is not applied to anonymous
CVE-2026-113652
ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leak
CVE-2026-113651
ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to up
CVE-2026-113650
ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an is not allowed and
CVE-2026-113649
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0
CVE-2026-113648
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API e
CVE-2026-113505
A flaw has been found in aaPanel up to 8.25.0. Impacted is the function send_file of the file BTPanel/routes/v2.py of th
CVE-2026-112958
ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget s
CVE-2026-112957
ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the getOne REST endpoint for pages d
CVE-2026-95109
The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The c
CVE-2026-95108
One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one.
CVE-2026-95107
A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-by
CVE-2026-94202
The Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a memo
CVE-2026-94192
A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask f
CVE-2026-94024
The Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as much
CVE-2026-94023
A ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one q