FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool...
CVE-2026-114042
FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the ow
2026-10-21 归档
今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation...
CVE-2026-114046
FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null p
FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its...
CVE-2026-114047
FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts unt
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this...
CVE-2026-113740
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown func
A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to...
CVE-2026-113738
A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09.
A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to...
CVE-2026-113737
A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This aff
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by...
CVE-2026-114038
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this...
CVE-2026-113741
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown f
Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for...
CVE-2020-37288
Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal functi
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect...
CVE-2021-48020
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when
Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function...
CVE-2021-48019
Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-
Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function...
CVE-2020-37287
Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex ty
Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions...
CVE-2026-105044
Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingte
Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such...
CVE-2020-37289
Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals(), to
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist)...
CVE-2025-71437
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allow
Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the...
CVE-2021-48018
Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as cont
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect...
CVE-2020-37286
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when
A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function...
CVE-2026-113706
A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/
A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure
CVE-2026-111762
### *Impact.** Push notification bearer tokens and authentication credentials submitted by clients are written to server
A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect
CVE-2026-111763
*Impact.** A malicious or compromised A2A agent can cause the client's API key credential to be forwarded to an arbitrar