共收录 69534 条相关情报。
← 返回所有主题CVE-2026-54426
Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bR
CVE-2026-54425
Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial
CVE-2026-48830
Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication
CVE-2026-87096
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec
CVE-2026-87095
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec
CVE-2026-58663
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: f
CVE-2026-41114
Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC dri
CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Typ
CVE-2026-97206
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by
CVE-2026-96405
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-na
CVE-2026-70387
Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2
CVE-2026-70386
Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vul
CVE-2026-50106
When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional
CVE-2026-35501
When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an addi
CVE-2026-114236
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file
CVE-2026-109125
In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'u
CVE-2026-82819
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manip
CVE-2026-92824
A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count
CVE-2026-92823
A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through
CVE-2026-92822
A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values th