今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-116735
libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers
CVE-2026-116734
flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier
CVE-2026-116732
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table
CVE-2026-116731
Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to c
CVE-2026-116730
Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/
CVE-2026-116729
libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001a
CVE-2026-116728
libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024
CVE-2026-116727
gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM comma
CVE-2026-116726
Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify fil
CVE-2026-116725
gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject RO
CVE-2026-116724
FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel
CVE-2026-116723
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attacke
CVE-2026-116591
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can pa
CVE-2026-116590
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Sna
CVE-2026-116589
Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentati
CVE-2026-116588
Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfus
CVE-2026-116587
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup
CVE-2026-116586
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup
CVE-2026-116585
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup
CVE-2026-116515
A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown cod