BKS keystore accepts legacy version with 16-bit integrity MAC key
CVE-2026-59651
In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue als
#advisory
共收录 23627 条相关情报。
← 返回所有主题LDAP filter injection in legacy jdk1.4 LDAPStoreHelper
CVE-2026-59652
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.
BKS/UBER keystore allocates from untrusted lengths before integrity check
CVE-2026-12185
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This i
Name Constraints bypass via trailing dot in rfc822Name and URI
CVE-2026-8763
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also a
PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
CVE-2026-15055
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also a
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to...
CVE-2026-3245
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution.
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N...
CVE-2026-18577
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions throu
A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform...
CVE-2026-9856
A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes vi
luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the...
CVE-2026-68583
luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the blocklist name field th
Better Auth relies on better-call, which uses the rou3 router library. In affected versions of...
CVE-2025-71399
Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalize
better-auth (npm) before 1.4.2 allows an external request to configure baseURL when it is not...
CVE-2025-71401
better-auth (npm) before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined (e.g., B
FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard...
CVE-2026-68579
FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStream_
Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA)...
CVE-2026-68582
Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA) vulnerability in the task-col
ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with...
CVE-2026-67356
ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowin
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection...
CVE-2026-68580
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across AL
ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP...
CVE-2026-68578
ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine p
Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management...
CVE-2026-68581
Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and
ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP...
CVE-2026-67357
ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP get_server_settings tool that
better-auth passkey versions before 1.4.0 contain an insecure direct object reference...
CVE-2025-71400
better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey delet
PyAthena 3.35.4 SQL Injection via DefaultParameterFormatter DELETE/CTAS
CVE-2026-65321
PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrar