今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-92287
Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This
CVE-2026-43848
A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the servic
CVE-2026-43847
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without re
CVE-2026-43846
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve
CVE-2026-43845
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
CVE-2026-43844
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
CVE-2026-43843
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the se
CVE-2026-43842
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash
CVE-2026-43841
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash
CVE-2026-43840
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash
CVE-2026-43839
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to
CVE-2026-43838
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution
CVE-2026-43837
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentica
CVE-2026-43836
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
CVE-2026-11960
Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses whe
CVE-2026-11959
Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitis
CVE-2026-113469
A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature ve
CVE-2026-113465
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To
CVE-2026-101201
A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-
CVE-2026-43835
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware