今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-93010
A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does n
CVE-2026-93009
A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option b
CVE-2026-93007
A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive t
CVE-2026-85231
A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wra
CVE-2026-79705
A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar arch
CVE-2026-58015
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism doe
CVE-2026-58014
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfil
CVE-2026-55655
A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding
CVE-2026-42013
A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the va
CVE-2026-42011
A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when p
CVE-2026-19730
The 'podman quadlet install --replace' command opens the existing destination file with O_CREATE|O_WRONLY but omits O_TR
CVE-2026-15588
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` a
CVE-2026-14324
RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.
CVE-2026-115455
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, interna
CVE-2026-113496
A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured passw
CVE-2026-113495
A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command
CVE-2026-109971
A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-l
CVE-2026-109970
A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plainte
CVE-2026-109969
A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets withou
CVE-2026-109968
A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption pass