In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space...
CVE-2026-68435
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec comm
#advisory
共收录 23530 条相关情报。
← 返回所有主题In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Handle torn-down...
CVE-2026-68429
In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Handle torn-down topology gracefully in
A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function...
CVE-2024-14043
A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data
In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock...
CVE-2026-68438
In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mod
The Mira cloud API accepts the firmware version reported by the companion app as authoritative...
CVE-2026-64934
The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, witho
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP...
CVE-2026-66340
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2)...
CVE-2026-5917
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command inj
cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference...
CVE-2026-29036
cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointe
The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without...
CVE-2026-66098
The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the d
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...
CVE-2026-19560
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code ins
Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...
CVE-2026-19556
Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside
Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote...
CVE-2026-19557
Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised
Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...
CVE-2026-19559
Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code insi
Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who...
CVE-2026-19558
Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to instal
Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow
CVE-2024-14043
A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data
calibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation Modification
CVE-2026-73249
calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoint POST /book-update-annotations/{librar
calibre: Bypass of Python template restrictions via nested `template()` leading to RCE
CVE-2026-73248
calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a
libgit2 v0.27.0-v1.9.0 Shell Command Injection via ssh_libssh2 Backend
CVE-2026-5917
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command inj
Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth
CVE-2026-73245
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/appli
When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's...
CVE-2026-66832
When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is app