今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表CVE-2026-116677
OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI manage
CVE-2026-116676
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0
CVE-2026-116078
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit a
CVE-2026-112355
The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauth
CVE-2026-110747
ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an attacker-controlled
CVE-2026-109823
An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/c
CVE-2026-106972
An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit/msgpack v0.11.0 allows attack
CVE-2026-106971
An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack v0.11.0 allows attackers to cause a D
CVE-2026-105420
Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scrip
CVE-2026-104895
The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to
CVE-2026-104189
The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file
CVE-2026-104016
ProtobufParser parses length-prefixed protobuf string and bytes fields by checking (_inputPtr + len) <= _inputEnd and th
CVE-2026-101273
Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented interna
CVE-2026-101272
The mechanism binding files generated during a shredding process to the authentication method is not working correctly a
CVE-2026-103995
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpret
CVE-2026-93520
A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X
CVE-2026-93519
A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland b
CVE-2026-93518
An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients i
CVE-2026-63286
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are sti
CVE-2026-93517
A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.