Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previ...

CVE-2026-9693

Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a us

历史摘要 · 未重新核验 · NVD

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles() can leave completed temporary f...

CVE-2026-19474

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, r

历史摘要 · 未重新核验 · NVD

The 'podman quadlet install --replace' command opens the existing destination file with O_CREATE|O_WRONLY but omits O_TRUNC. When the initial reflink copy attempt fails (common ...

CVE-2026-19730

The 'podman quadlet install --replace' command opens the existing destination file with O_CREATE|O_WRONLY but omits O_TR

来源摘录 · NVD

Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user ...

CVE-2026-20712

Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information disc

历史摘要 · 未重新核验 · NVD

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-68809

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_session_persistence of the file executor/app/core/workspa...

CVE-2026-19019

A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_

历史摘要 · 未重新核验 · NVD

Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users.

CVE-2026-63545

Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They

历史摘要 · 未重新核验 · NVD

better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin,...

CVE-2026-67334

better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endp

历史摘要 · 未重新核验 · GitHub Advisory

better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessio...

CVE-2026-67334

better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endp

历史摘要 · 未重新核验 · NVD

better-auth Stale Sessions Persist After User Deletion

CVE-2026-67334

better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endp

历史摘要 · 未重新核验 · OSV.dev

Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To make this more robust, a new XEN_DOMCTL_get_domain_state w...

CVE-2026-42492

Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To m

历史摘要 · 未重新核验 · NVD

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When huge_pmd_unshare() is called to unshare a PMD t...

CVE-2026-63875

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tab

来源摘录 · NVD

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system...

CVE-2026-7639

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use afte

历史摘要 · 未重新核验 · GitHub Advisory

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory a...

CVE-2026-7639

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use afte

历史摘要 · 未重新核验 · NVD

Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows

### Am I affected? Users are affected if all of the following are true: - They configure `secondaryStorage` on `better

历史摘要 · 未重新核验 · GitHub Advisory

mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)

CVE-2026-35361

uutils calls `mknod` *before* setting the SELinux context (GNU uses `setfscreatecon` first, labeling atomically). If `se

历史摘要 · 未重新核验 · GitHub Advisory

The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup pa...

CVE-2026-11576

The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process t

历史摘要 · 未重新核验 · NVD

Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

CVE-2026-5038

### Impact A vulnerability in Multer allows an attacker to trigger a Denial of Service (DoS) by aborting or sending mal

历史摘要 · 未重新核验 · GitHub Advisory

Impact: multer versions 2.0.0-alpha.1 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service when using diskStorage. Aborted or malformed multipart uploads leave ...

CVE-2026-5038

Impact: multer versions 2.0.0-alpha.1 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service when using d

历史摘要 · 未重新核验 · NVD

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage...

CVE-2026-53867

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remo

历史摘要 · 未重新核验 · GitHub Advisory