Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending speciall...

CVE-2026-23825

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacke

历史摘要 · 未重新核验 · NVD

WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to ac...

CVE-2026-44343

WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard t

历史摘要 · 未重新核验 · NVD

Shelf is a platform for tracking physical assets. From 1.12 to before 1.20.1, a SQL injection vulnerability in the sortBy query parameter on the /assets route allows any authent...

CVE-2026-44204

Shelf is a platform for tracking physical assets. From 1.12 to before 1.20.1, a SQL injection vulnerability in the sortB

历史摘要 · 未重新核验 · NVD

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

CVE-2026-35433

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

CVE-2026-32177

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivile...

CVE-2026-20767

Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User App

历史摘要 · 未重新核验 · NVD

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded whatever byt...

CVE-2026-43989

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a

历史摘要 · 未重新核验 · NVD

Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service. Unprivileged soft...

CVE-2026-20905

Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Appl

历史摘要 · 未重新核验 · NVD

Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged sof...

CVE-2026-20717

Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User App

历史摘要 · 未重新核验 · NVD

Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege...

CVE-2025-35990

Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring

历史摘要 · 未重新核验 · NVD

protobuf.js: Denial of service from crafted field names in generated code

CVE-2026-44294

## Summary protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain con

历史摘要 · 未重新核验 · GitHub Advisory

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, An incomplete mitigation for CVE-2025-55733 lea...

CVE-2026-43899

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.

历史摘要 · 未重新核验 · NVD

Yii 2: Local file inclusion via view parameter name collision

CVE-2026-39850

The core view rendering method `View::renderPhpFile()` calls `extract($_params_, EXTR_OVERWRITE)` before the `require` s

历史摘要 · 未重新核验 · GitHub Advisory

Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in promptForFeedUrl, but item links inside the feed are not...

CVE-2026-44658

Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in

历史摘要 · 未重新核验 · NVD

jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import paths at the jq-language level, but later resolves those paths through C strin...

CVE-2026-43895

jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import paths at the jq-langu

历史摘要 · 未重新核验 · NVD

Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Login plugin accepts attacker-controlled groups and access fields from the registra...

CVE-2026-42613

Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Login plugin accepts attac

历史摘要 · 未重新核验 · NVD

Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2.

CVE-2026-34086

Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2

历史摘要 · 未重新核验 · NVD

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

Summary The patch for CVE-2026-42215 (GitPython 3.1.49) validates newlines only in the value parameter of set_value().

历史摘要 · 未重新核验 · GitHub Advisory

free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types

CVE-2026-44325

### Summary free5GC's NRF root SBI endpoint `POST /oauth2/token` contains a parser-level type-confusion bug family. The

历史摘要 · 未重新核验 · GitHub Advisory

free5GC's NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)

CVE-2026-44319

### Summary free5GC's NEF terminates the entire process when a stored PFD-subscription `notifyUri` cannot be reached. In

历史摘要 · 未重新核验 · GitHub Advisory