今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-117512
A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee
CVE-2026-116675
TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates
CVE-2026-116674
systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/netw
CVE-2026-116673
systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) im
CVE-2026-116672
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientC
CVE-2026-114598
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can
CVE-2026-114597
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can
CVE-2026-114596
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trig
CVE-2026-113775
A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command expos
CVE-2026-112353
GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webma
CVE-2026-109090
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before
CVE-2026-109089
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious
CVE-2026-109088
A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_
CVE-2026-108142
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
CVE-2026-108141
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe
CVE-2026-108140
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe
CVE-2026-108015
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com
CVE-2026-108014
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com
CVE-2026-107671
A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disab
CVE-2026-106078
A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token an