今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-6877
ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task
CVE-2026-59388
Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exp
CVE-2026-59386
A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper p
CVE-2026-59385
A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, en
CVE-2026-119317
On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the
CVE-2026-119251
A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in
CVE-2026-119250
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerabil
CVE-2026-119249
A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found i
CVE-2026-111487
An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.
CVE-2026-105924
A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.
CVE-2026-104615
A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12
CVE-2026-103094
ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. Thi
CVE-2026-103093
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulner
CVE-2026-119466
Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Si
CVE-2026-119369
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell
CVE-2026-116407
Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Conf
CVE-2026-119277
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3
CVE-2026-119189
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod
CVE-2026-118760
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.1
CVE-2026-118758
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the