共收录 182 条相关情报。
← 返回所有主题CVE-2026-86133
An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has comp
CVE-2026-102730
Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **wri
CVE-2026-102711
Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via `
CVE-2026-75806
Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthentica
CVE-2026-75806
Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthentica
CVE-2026-12974
A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW). This issue affects Forcepoint Secu
CVE-2026-94450
Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated
CVE-2026-93345
MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterator
CVE-2026-89420
Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obt
CVE-2026-89420
Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obt
CVE-2026-76899
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. From 1.
CVE-2026-93749
source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attacke
CVE-2026-93749
source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attacke
CVE-2025-36178
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass inpu
CVE-2026-48977
OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() pro
CVE-2026-50285
Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryStringV2 in pkg/hpke/url.go performs
CVE-2026-93015
BlueKitchen BTstack through 1.8.2 fails to validate the peer-reported endpoint count against table bounds in A2DP stream
CVE-2026-73436
On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 p
CVE-2026-69210
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTranscoder.bodyLength reje
CVE-2026-87962
t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to val