今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-119135
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a differen
CVE-2026-119132
Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger
CVE-2026-119131
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability in wasmtime-wasi-http
CVE-2026-119128
ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticat
CVE-2026-119127
ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticate
CVE-2026-119124
ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause w
CVE-2026-119123
ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder
CVE-2026-119120
Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bod
CVE-2026-119119
Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails
CVE-2026-116641
The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. Howe
CVE-2026-116067
Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBacku
CVE-2026-116052
A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function.
CVE-2026-116048
A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Aff
CVE-2026-116045
A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file
CVE-2026-116018
ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent
CVE-2026-116006
A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown fun
CVE-2026-115999
A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the funct
CVE-2026-115973
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword
CVE-2026-115970
A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-updat
CVE-2026-114148
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.