共收录 141 条相关情报。
← 返回所有主题CVE-2026-32682
When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or
CVE-2026-45624
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-
CVE-2026-45359
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-
CVE-2026-24181
NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A succes
CVE-2026-25276
Memory corruption while using Strongbox due to missing bounds check.
CVE-2026-25276
Memory corruption while using Strongbox due to missing bounds check.
CVE-2026-45104
MapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSLDParseUserStyle always
CVE-2026-46377
### Summary `dasel`'s selector lexer panics with an index-out-of-range error when tokenizing a quoted string that ends
CVE-2026-45799
# CVE-2026-45799 ## Maintainer summary Wire's protobuf group-skipping logic did not reject negative lengths before ski
CVE-2026-45624
When performing a polynomial distortion an out of bounds over-read of 24 bytes can occur when specifying specific argume
CVE-2026-45359
An invalid `connected-components:keep-top` value could result in a heap buffer over-read when performing the connected c
CVE-2026-44310
Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. From 0.4.0 to before 0
CVE-2023-31309
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload
CVE-2023-31309
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload
CVE-2026-44222
vLLM is an inference and serving engine for large language models (LLMs). From 0.6.1 to before 0.20.0, there is a a Toke
CVE-2026-41643
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.
CVE-2026-40251
Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the stora
CVE-2026-44222
## Summary This report explains a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-o
CVE-2024-49970
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream
CVE-2024-46813
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_index before accessing