Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 -...
CVE-2026-116187
Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows a
2026-10-26 归档
今日共收录 660 条安全情报，包含 0 个 CVE，351 篇安全通告，以及 56 篇研究论文。
← 返回归档列表vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API...
CVE-2026-116179
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/
rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in...
CVE-2026-116188
rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory acco
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote...
CVE-2026-116178
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engi
vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the...
CVE-2026-116175
vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path call
vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote...
CVE-2026-116173
vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate Engi
SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath...
CVE-2026-116171
SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows ex
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust...
CVE-2026-116174
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and Generat
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows...
CVE-2026-116176
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outb
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust...
CVE-2026-116172
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC converter that allow
Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with...
CVE-2026-116162
Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with master privileges when i
Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure...
CVE-2026-116161
Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuer
Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing authorization...
CVE-2026-116165
Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing authorization vulnerability on MongoDB de
SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-116169
SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows users with edit permiss
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command...
CVE-2026-116158
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free...
CVE-2026-116157
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when r
SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the...
CVE-2026-116167
SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page tha
SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to...
CVE-2026-116170
SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injec
Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass...
CVE-2026-116163
Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp,
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of...
CVE-2026-116159
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision