Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
CVE-2026-115776
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
2026-10-30 归档
今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
CVE-2026-115877
Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
CVE-2026-115897
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
CVE-2026-115754
serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names
CVE-2026-116137
adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names
Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg
CVE-2026-115484
Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg
Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning
CVE-2026-115486
Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning
Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio
CVE-2026-115485
Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio
Drivers: hv: Don't reset VMBus connection state on error/exit paths
CVE-2026-99216
Drivers: hv: Don't reset VMBus connection state on error/exit paths
power: supply: core: prevent unregistering a power supply while a callback runs
CVE-2026-99215
power: supply: core: prevent unregistering a power supply while a callback runs
vsock: treat TCP_CLOSING as once-established
CVE-2026-99213
vsock: treat TCP_CLOSING as once-established
net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
CVE-2026-99212
net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
netlink: reset skb headers before unicast and multicast filtering
CVE-2026-99211
netlink: reset skb headers before unicast and multicast filtering
scsi: target: iscsi: Fix race in discovery auth updates
CVE-2026-99206
scsi: target: iscsi: Fix race in discovery auth updates
ocfs2/dlm: Protect the recovery list during debugfs reads
CVE-2026-99204
ocfs2/dlm: Protect the recovery list during debugfs reads
pipe: preserve existing fasync readers on writer setup failure
CVE-2026-99203
pipe: preserve existing fasync readers on writer setup failure
netlink: avoid hashing the network namespace pointer
CVE-2026-99201
netlink: avoid hashing the network namespace pointer
net: bcmgenet: unshare the skb before writing the control block
CVE-2026-99192
net: bcmgenet: unshare the skb before writing the control block
calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
CVE-2026-99191
calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
gpio: mxc: fix race between chained IRQ handler install and probe completion
CVE-2026-99189
gpio: mxc: fix race between chained IRQ handler install and probe completion