今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-115567
Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll_t
CVE-2026-115480
baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /bas
CVE-2026-115477
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a
CVE-2026-114621
baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail acti
CVE-2026-113576
Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-111946
Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header.
CVE-2026-110688
Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer pe
CVE-2026-110687
Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cm
CVE-2026-110244
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to
CVE-2026-110190
IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attack
CVE-2026-108088
** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using
CVE-2026-104314
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow
CVE-2026-103092
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due
CVE-2025-60482
A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1
CVE-2026-83918
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83919
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.
CVE-2026-83920
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc
CVE-2026-83921
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc
CVE-2026-83922
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83569
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.