今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表CVE-2026-81472
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (i
CVE-2026-50057
A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra ac
CVE-2026-50056
A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the
CVE-2026-48379
Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe
CVE-2026-47486
NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successf
CVE-2026-2270
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions
CVE-2026-116844
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only t
CVE-2026-115785
An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) all
CVE-2026-114732
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-
CVE-2026-113775
A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command expos
CVE-2026-111422
In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` para
CVE-2026-107672
A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Pr
CVE-2026-104349
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary c
CVE-2026-103593
A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who ca
CVE-2026-102815
An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service run
CVE-2026-102814
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable
CVE-2026-101854
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported
CVE-2026-101853
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported
CVE-2026-101852
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported
CVE-2026-101842
Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO).