今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-116836
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scr
CVE-2026-116829
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers
CVE-2026-116816
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo
CVE-2026-116623
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of t
CVE-2026-116620
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStri
CVE-2026-116608
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function
CVE-2026-116605
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function
CVE-2025-71439
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows a
CVE-2024-58400
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal t
CVE-2024-58399
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read
CVE-2026-116826
YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that all
CVE-2026-116822
YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers t
CVE-2026-116818
OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers t
CVE-2026-116813
OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-re
CVE-2026-116809
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unaut
CVE-2026-116805
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain
CVE-2026-116804
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expression
CVE-2026-116803
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed
CVE-2026-116802
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attribute
CVE-2026-116801
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo