今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-86320
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true.
CVE-2026-74860
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providin
CVE-2026-15801
A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to
CVE-2026-13116
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference
CVE-2026-58015
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism doe
CVE-2026-58014
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfil
CVE-2026-58013
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when
CVE-2026-58012
A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW`
CVE-2026-58011
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the gli
CVE-2026-58010
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-seriali
CVE-2026-55655
A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding
CVE-2026-16118
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the
CVE-2026-15588
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` a
CVE-2026-107444
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when l
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (
CVE-2026-89058
A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Ori
CVE-2026-68563
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and th
CVE-2026-68562
A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp
CVE-2026-61719
WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site scripting vulnerability in `saud
CVE-2026-61673
WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in `