今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-111073
The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics payload against tel
CVE-2026-115942
A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certif
CVE-2026-114230
When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL fr
CVE-2026-105042
A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. Thi
CVE-2026-105031
When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs(
CVE-2026-114400
Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download
CVE-2026-88967
A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-contro
CVE-2026-88858
A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontr
CVE-2026-79656
A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC
CVE-2026-110183
PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaini
CVE-2026-110182
PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. These f
CVE-2026-110181
PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bo
CVE-2026-105620
PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL Anonymi
CVE-2026-105619
PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL Ano
CVE-2026-105618
PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to t
CVE-2026-105617
PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans
CVE-2026-105616
PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`.
CVE-2026-105615
PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked ro
CVE-2026-105614
PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowin
CVE-2026-105613
PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited