今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2025-57848
A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from
CVE-2025-11537
A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre
CVE-2025-0750
A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkConta
CVE-2024-9676
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage lib
CVE-2024-9341
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file pa
CVE-2024-12397
A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming
CVE-2024-11831
A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not
CVE-2013-1840
A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached i
CVE-2013-1815
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer
CVE-2013-0266
A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file pe
CVE-2013-0261
A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name i
CVE-2012-5605
A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder
CVE-2012-4574
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrati
CVE-2012-3427
A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permission
CVE-2012-0059
A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-R
CVE-2026-119764
Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling ta
CVE-2026-119722
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skip
CVE-2026-119720
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that read
CVE-2026-119719
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail ext
CVE-2026-119718
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in p