共收录 23210 条相关情报。
← 返回所有主题CVE-2026-106449
### Summary When `LZ4BlockInputStream` is configured with `stopOnEmptyBlock = false` (the mode for reading concatenated
CVE-2026-106450
### Summary `LZ4FrameInputStream` allocates two new buffers of the frame's maximum block size, up to 4 MiB each, every
CVE-2026-105647
### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user
CVE-2026-105648
### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user
CVE-2026-105649
### Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitizatio
CVE-2026-105699
### Summary Langflow's project-scoped MCP transport authenticates the caller for the `project_id` in the connection URL,
CVE-2026-94544
Pending `use cache` fills are shared across requests for the same key without distinguishing Draft Mode requests from re
CVE-2026-94543
Self-hosted Next.js applications that use the Pages Router with statically generated (SSG) or incrementally regenerated
CVE-2026-94486
The Next.js development server (`next dev`) exposes a Model Context Protocol endpoint that does not verify which website
CVE-2026-94485
In Next.js App Router applications built with webpack, metadata image routes such as opengraph-image and twitter-image i
CVE-2026-94484
Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regen
CVE-2026-94483
## Impact An attacker-controlled, allow-listed remote URL can lead to server-side request forgery (e.g. to private IPs)
CVE-2026-105856
### Impact An attacker who has read plus create or update access to a collection can submit a request that includes a S
CVE-2026-105858
### Impact A crafted request to the public first-register operation can be used to perform a RCE exploit. **You are aff
CVE-2026-19386
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code v
CVE-2026-16528
Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to
CVE-2026-14911
Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a rem
CVE-2026-19396
A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE5
CVE-2026-16516
wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiate
CVE-2026-84897
src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_M