CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to ...

CVE-2026-76198

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file syst

历史摘要 · 未重新核验 · NVD

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabi...

CVE-2026-71443

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de

历史摘要 · 未重新核验 · NVD

OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions 3.4.0 through 3....

CVE-2026-55371

OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used

历史摘要 · 未重新核验 · NVD

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment:...

CVE-2026-72711

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the che

历史摘要 · 未重新核验 · GitHub Advisory

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

CVE-2026-55477

# Summary An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on

历史摘要 · 未重新核验 · GitHub Advisory

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will to...

CVE-2026-76816

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final,

历史摘要 · 未重新核验 · NVD

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the check_no_metavar_no_fvar call that the definition and theore...

CVE-2026-72711

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the che

历史摘要 · 未重新核验 · NVD

postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service

A malicious or compromised server can return a binary `hstore` value with an invalid internal length field, causing the

历史摘要 · 未重新核验 · GitHub Advisory

Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0...

CVE-2026-78329

Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.1

历史摘要 · 未重新核验 · NVD

Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, ...

CVE-2026-71300

Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Cam

历史摘要 · 未重新核验 · NVD

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component Th...

CVE-2026-63621

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Inject

历史摘要 · 未重新核验 · NVD

Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. ...

CVE-2026-59230

Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9,

历史摘要 · 未重新核验 · NVD

RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer....

CVE-2026-76840

RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper

历史摘要 · 未重新核验 · NVD

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitr...

CVE-2026-59568

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthe

历史摘要 · 未重新核验 · NVD

fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be ...

CVE-2026-75975

fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6

历史摘要 · 未重新核验 · NVD

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function...

CVE-2026-78147

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of th

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component gg...

CVE-2026-78147

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of th

历史摘要 · 未重新核验 · NVD

justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active...

CVE-2026-7808

justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g.,

历史摘要 · 未重新核验 · GitHub Advisory

justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers ...

CVE-2026-5388

justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_st

历史摘要 · 未重新核验 · GitHub Advisory

justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially lea...

CVE-2026-7808

justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g.,

历史摘要 · 未重新核验 · NVD