今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-66089
In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves ext
CVE-2026-66088
In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating sy
CVE-2026-16889
In openEQUELLA before 2026.1, the pre-login notice image upload endpoint (PUT /api/preloginnotice/image/{name}) does not
CVE-2026-5201
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loade
CVE-2023-26142
All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build he
CVE-2026-86874
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a malicious
CVE-2026-86875
An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a malic
CVE-2026-118258
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Pri
CVE-2026-86949
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A ma
CVE-2026-118661
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 20.14.6, Happy
CVE-2026-118256
Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling esc
CVE-2026-118666
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the Gr
CVE-2026-118665
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the Gr
CVE-2026-114399
Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by s
CVE-2026-61571
AVideo is a video-sharing Platform. Prior to 8.1.0, the encoder lacks a global authentication layer and exposes control
CVE-2026-114358
This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the
CVE-2026-103665
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Librari
CVE-2026-118029
Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) befor
CVE-2026-115415
Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 mig
CVE-2026-114349
When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed