今日共收录 1236 条安全情报，包含 262 个 CVE，575 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-78119
The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse() (drivers/espi/espi_npcx.c),
CVE-2026-78118
The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it
CVE-2026-78117
The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet
CVE-2026-78116
The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails
CVE-2026-19947
The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and d
CVE-2026-19676
The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, chec
CVE-2026-18748
The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field
CVE-2026-114267
A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the
CVE-2026-114266
A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the fun
CVE-2026-113870
MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editabl
CVE-2026-113461
Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library direct
CVE-2026-111804
Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unva
CVE-2026-111401
Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Reques
CVE-2026-110803
VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside t
CVE-2026-107588
Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 1
CVE-2026-105945
The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by usin
CVE-2026-105944
Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login,
CVE-2026-105942
When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broke
CVE-2026-105936
The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on
CVE-2026-105935
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied va