今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-107045
Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized atta
CVE-2026-107048
An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute
CVE-2026-93570
Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a craf
CVE-2026-93571
Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update req
CVE-2026-90870
A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versi
CVE-2026-90991
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to al
CVE-2026-90871
Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.
CVE-2026-90862
Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202
CVE-2026-90869
A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress S
CVE-2026-77819
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to im
CVE-2026-66912
Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Cla
CVE-2026-84294
Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 20
CVE-2026-77817
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to
CVE-2026-66911
Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due
CVE-2026-93006
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is
CVE-2026-85498
A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authenticatio
CVE-2026-11822
SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows att
CVE-2025-6170
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inpu
CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate
CVE-2026-93008
A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME targ