共收录 70327 条相关情报。
← 返回所有主题CVE-2026-84823
A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBA
CVE-2026-111274
unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an in
CVE-2026-111357
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, le
CVE-2026-62322
Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an auth
CVE-2026-57183
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth() in src/main/java/com/erudika
CVE-2026-55587
AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser ext
CVE-2026-55240
Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, formatString() in s
CVE-2026-111231
Rejected reason: This CVE ID has been rejected because it does not describe a security vulnerability.
CVE-2026-111229
Rejected reason: This CVE ID has been rejected because it does not describe a security vulnerability.
CVE-2026-111221
Rejected reason: This CVE ID has been rejected because it does not describe a security vulnerability.
CVE-2026-61702
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, co
CVE-2026-55103
Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5, i
CVE-2026-54683
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom
CVE-2026-85634
A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by
CVE-2026-77468
Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes the Scramble-generated OpenAP
CVE-2026-61611
Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v2/Album::unlock has no throttle, attempt
CVE-2026-100353
kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths t
CVE-2026-92982
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection v
CVE-2026-98432
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace
CVE-2026-16438
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite