llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the...
CVE-2026-70639
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper w
#advisory
共收录 23530 条相关情报。
← 返回所有主题Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter...
CVE-2026-70558
Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path)
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read...
CVE-2026-70630
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the na
Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated...
CVE-2026-70636
Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access th
FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow...
CVE-2026-70628
FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtit
FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write...
CVE-2026-70632
FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native G
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the...
CVE-2026-70634
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression revers
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability...
CVE-2026-70633
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compres
Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level...
CVE-2026-70559
Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation t
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read...
CVE-2026-70629
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the na
FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory...
CVE-2026-70631
FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in
diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any...
CVE-2026-70557
diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability...
CVE-2026-70635
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authentica
Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated...
CVE-2026-67621
Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perf
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI...
CVE-2026-67622
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration th
Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets...
CVE-2026-5857
Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking
ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in...
CVE-2026-67688
ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module.
SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code...
CVE-2026-67689
SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `or
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate...
CVE-2026-67687
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/rol
An authentication issue was addressed with improved state management. This issue is fixed in...
CVE-2026-65400
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS