In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When huge_pmd_unshare() is called to unshare a PMD t...

CVE-2026-63875

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tab

来源摘录 · NVD

A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto()...

CVE-2026-14935

A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function contains an inverte

历史摘要 · 未重新核验 · GitHub Advisory

A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function contains an inverted boolean condition that causes it to accept remote SDP o...

CVE-2026-14935

A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function contains an inverte

历史摘要 · 未重新核验 · NVD

cut: -s (only-delimited) ignored when delimiter is a newline

CVE-2026-35343

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is speci

历史摘要 · 未重新核验 · GitHub Advisory

Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist...

CVE-2026-56328

Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist simultaneously, while unn

历史摘要 · 未重新核验 · GitHub Advisory

Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist simultaneously, while unnamed /updates requests without defaultChannel implicitly ...

CVE-2026-56328

Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist simultaneously, while unn

历史摘要 · 未重新核验 · NVD

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined the RFC 4...

CVE-2026-7656

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) use

历史摘要 · 未重新核验 · NVD

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special...

CVE-2026-55276

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisa

历史摘要 · 未重新核验 · GitHub Advisory

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant...

CVE-2026-53404

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first cond

历史摘要 · 未重新核验 · GitHub Advisory

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web...

CVE-2026-55276

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisa

历史摘要 · 未重新核验 · NVD

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR condition...

CVE-2026-53404

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first cond

历史摘要 · 未重新核验 · NVD

Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices...

CVE-2026-56307

Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudf

历史摘要 · 未重新核验 · GitHub Advisory

Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudflare/workerd path that allows authenticated attackers to ...

CVE-2026-56307

漏洞存在于 Cap-go 产品 /private/devices 端点（Cloudflare/workerd 路径）中，属于游标分页（cursor pagination）逻辑缺陷。版本 12.128.12 之前的 Cap-go 在处理分页游

历史摘要 · 未重新核验 · NVD

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

CVE-2026-12321

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird

历史摘要 · 未重新核验 · NVD

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for cod...

CVE-2026-48844

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues o

历史摘要 · 未重新核验 · NVD

A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco...

CVE-2026-20171

A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switc

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX...

CVE-2026-20171

A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switc

历史摘要 · 未重新核验 · NVD

An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, dash_uploader/upload...

CVE-2026-38361

An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the

历史摘要 · 未重新核验 · NVD

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

CVE-2026-44928

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

历史摘要 · 未重新核验 · NVD

ydb-go-sdk's transactions are not committed using the `options.WithCommit()` option on last call `table.Transaction.Execute` in transaction

### Impact Transactions were NOT committed despite the explicit `options.WithCommit` flag using table service client. Be

历史摘要 · 未重新核验 · GitHub Advisory