今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-107059
An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch
CVE-2026-107057
An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.
CVE-2026-107053
Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write a
CVE-2026-107049
An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supply
CVE-2026-107050
An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in the
CVE-2026-107052
Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attack
CVE-2026-107051
Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arb
CVE-2025-12523
Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user
CVE-2026-107046
A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows att
CVE-2026-107043
Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SM
CVE-2023-7357
A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vul
CVE-2026-107044
Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily mani
CVE-2026-20589
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege
CVE-2026-20588
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation
CVE-2026-20587
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privi
CVE-2026-20586
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of
CVE-2026-20579
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege
CVE-2026-20470
In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf
CVE-2026-20469
In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local e
CVE-2026-107047
Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the ap