今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-107034
Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read ano
CVE-2026-107033
Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorize
CVE-2026-107030
Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger
CVE-2026-107029
Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to
CVE-2026-107028
Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an export
CVE-2026-107027
Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported
CVE-2026-107025
Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export t
CVE-2026-106036
Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS c
CVE-2025-13050
Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user
CVE-2026-118673
KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2
CVE-2026-112256
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allow
CVE-2026-112255
Initialization of a resource with an insecure default vulnerability in OpenText Advanced Authentication Server allows Ex
CVE-2026-101421
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported version
CVE-2026-101772
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versio
CVE-2026-115795
P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next b
CVE-2026-115794
P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a
CVE-2026-115793
P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or obje
CVE-2026-112200
P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejecte
CVE-2026-111736
P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request withou
CVE-2026-111735
P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame whil