今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-114047
FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts unt
CVE-2026-114046
FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null p
CVE-2026-114045
FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparo
CVE-2026-114044
FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP s
CVE-2026-114043
FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winp
CVE-2026-114042
FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the ow
CVE-2026-114038
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a
CVE-2026-113741
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown f
CVE-2026-113740
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown func
CVE-2026-113738
A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09.
CVE-2026-113737
A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This aff
CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores
CVE-2026-105044
Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingte
CVE-2025-71437
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allow
CVE-2021-48020
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when
CVE-2021-48019
Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-
CVE-2021-48018
Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as cont
CVE-2020-37289
Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals(), to
CVE-2020-37288
Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal functi
CVE-2020-37287
Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex ty