共收录 1721 条相关情报。
← 返回所有主题CVE-2026-91842
A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert o
CVE-2026-54254
Cyberdrop-DL is a bulk asynchronous downloader for multiple file hosts. From 8.5.0 until 9.14.0, the Pixeldrain crawler
CVE-2026-47780
free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and H
CVE-2026-91819
Affected versions of MISP rely on CakePHP request-method override processing in a way that can disable CSRF and form-sec
CVE-2026-88261
Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.
CVE-2026-86885
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An
CVE-2026-86879
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A r
CVE-2026-84538
A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, mac
CVE-2026-43692
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Se
CVE-2026-28960
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10.
CVE-2026-54632
SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the S
CVE-2026-56831
## Summary The Shopper Framework discount management functionality accepts negative discount values without server-side
CVE-2026-85979
Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the java_keystore_pa
CVE-2026-3096
The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the origina
CVE-2026-13745
A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary
CVE-2026-54694
SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a s
CVE-2026-54694
SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a s
CVE-2026-87083
A weakness has been identified in tile-ai tilelang up to 0.1.14. This impacts the function KernelCache._load_kernel_from
CVE-2026-87599
Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI
CVE-2026-87600
Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacke