cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace operation that is missing its value member, or a move...

CVE-2026-67217

cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a repl

历史摘要 · 未重新核验 · NVD

Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure leaves the encoder out of sync with th...

CVE-2026-65100

Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so

历史摘要 · 未重新核验 · NVD

Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could re...

CVE-2026-14169

Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted in

历史摘要 · 未重新核验 · NVD

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

CVE-2026-56355

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

历史摘要 · 未重新核验 · GitHub Advisory

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

CVE-2026-56355

该漏洞影响 GNU Savannah Administration 的 Savane 平台（版本至 3.17）。问题在于授权过程中使用了不可信数据，攻击者无需认证即可通过网络利用此缺陷，但需要较高攻击复杂度（如特定条件或环境）。成功利用后，

历史摘要 · 未重新核验 · NVD

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass t...

CVE-2026-49318

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 m

历史摘要 · 未重新核验 · NVD

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass t...

CVE-2026-49317

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 m

历史摘要 · 未重新核验 · NVD

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in...

CVE-2026-44919

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can oc

历史摘要 · 未重新核验 · GitHub Advisory

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.

CVE-2026-44919

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can oc

历史摘要 · 未重新核验 · NVD

GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where ...

CVE-2026-45033

GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulne

历史摘要 · 未重新核验 · NVD

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of...

CVE-2026-44600

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue.

历史摘要 · 未重新核验 · GitHub Advisory

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010.

CVE-2026-44600

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-202

历史摘要 · 未重新核验 · NVD

kanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input

### Summary The `POST /v1/domain/_image` and `POST /v1/oauth2/{rs_name}/_image` handlers call `validate_image()` on the

历史摘要 · 未重新核验 · GitHub Advisory

An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be...

CVE-2026-43002

An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session stor

历史摘要 · 未重新核验 · NVD