今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-116604
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown fun
CVE-2026-116603
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file adm
CVE-2026-111422
In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` para
CVE-2026-76654
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a sym
CVE-2026-2270
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions
CVE-2026-116602
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink o
CVE-2026-116556
A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componen
CVE-2026-116555
A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-f
CVE-2026-116554
A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla
CVE-2026-116748
Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that expos
CVE-2026-116747
Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge
CVE-2026-116746
QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview AJAX
CVE-2026-116743
libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows a
CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that
CVE-2026-116741
Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspee
CVE-2026-116740
libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote atta
CVE-2026-116739
VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes unini
CVE-2026-116738
VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trig
CVE-2026-116737
libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_pat
CVE-2026-116736
Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c