DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled...
CVE-2026-116841
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_f
2026-10-27 归档
今日共收录 787 条安全情报，包含 0 个 CVE，405 篇安全通告，以及 97 篇研究论文。
← 返回归档列表A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site...
CVE-2026-116838
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because...
CVE-2026-116844
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only t
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site...
CVE-2026-116839
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled...
CVE-2026-116842
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element...
CVE-2026-116605
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by...
CVE-2026-116608
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and...
CVE-2024-58400
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal t
A malicious actor with access to the adjacent network and under certain conditions could exploit...
CVE-2026-116836
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scr
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader...
CVE-2026-116840
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl:...
CVE-2025-71439
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows a
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in...
CVE-2026-116816
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in...
CVE-2026-116829
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page...
CVE-2026-116824
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allo
YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(...
CVE-2026-116825
YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validate
YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from...
CVE-2026-116828
YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed
YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which...
CVE-2026-116821
YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into S
YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows...
CVE-2026-116820
YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers t
YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows...
CVE-2026-116823
YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in
YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows...
CVE-2026-116822
YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers t