今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-61840
Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates
CVE-2026-119117
Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the li
CVE-2026-119763
changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attacker
CVE-2026-50000
SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documen
CVE-2026-61804
myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category`
CVE-2026-61806
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
CVE-2026-61805
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
CVE-2026-61803
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
CVE-2026-55551
ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id
CVE-2026-39375
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
CVE-2026-119298
croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the rec
CVE-2026-119116
A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS
CVE-2026-48164
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11,
CVE-2026-61627
libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. P
CVE-2026-61626
libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. Fro
CVE-2026-100355
Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the ser
CVE-2026-116130
HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request. The XS
CVE-2026-87768
DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_l
CVE-2026-97209
Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another use
CVE-2026-115274
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an