今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-112351
Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allow
CVE-2026-112350
Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unau
CVE-2026-103995
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpret
CVE-2026-118180
When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response wit
CVE-2026-118179
Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and p
CVE-2026-118178
A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription
CVE-2026-118177
When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thund
CVE-2026-118176
Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed
CVE-2026-118175
When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different me
CVE-2026-118174
When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's con
CVE-2026-118173
MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for requ
CVE-2026-118172
The strapi/strapi (Core Admin / Webhook Runner) package is vulnerable to a semi-blind SSRF via a webhook follow-redirect
CVE-2026-118171
The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. T
CVE-2026-118170
The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made w
CVE-2026-116683
CTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored
CVE-2026-115413
Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allo
CVE-2026-88812
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached
CVE-2026-87086
Tanium addressed a denial of service vulnerability in Provision.
CVE-2026-87085
Tanium addressed a SQL injection vulnerability in Provision.
CVE-2026-16491
Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted