共收录 69142 条相关情报。
← 返回所有主题CVE-2026-113793
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF t
CVE-2026-113792
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a craft
CVE-2026-113791
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing a conte
CVE-2026-113790
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays
CVE-2026-113789
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large
CVE-2026-113787
odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and JavaS
CVE-2026-102486
Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash t
CVE-2026-102485
Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls th
CVE-2026-102484
Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Te
CVE-2026-102483
Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request wi
CVE-2026-114250
A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This is
CVE-2026-109619
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be cor
CVE-2026-109618
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some co
CVE-2026-104949
WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (
CVE-2026-104948
WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (
CVE-2026-104947
WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in fu
CVE-2025-0326
The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account ma
CVE-2024-7478
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or
CVE-2024-6423
The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data t
CVE-2024-5563
Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha op