共收录 135 条相关情报。
← 返回所有主题CVE-2026-62334
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin
CVE-2026-107311
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsin
CVE-2026-62374
SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and e
CVE-2026-119126
Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null or undefined values w
CVE-2026-109855
### Impact undici's experimental WebSocket client (enabled by default via `allowH2: true`) crashes the Node.js process
CVE-2026-86412
A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the ne
CVE-2026-113380
In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability
CVE-2026-100352
## Summary kin-openapi guards against `NaN` and `Inf` values in its built-in schema visitor (`visitJSON`) by returning
CVE-2026-0318
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software o
CVE-2026-0319
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an
CVE-2026-0317
A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only a
CVE-2026-0321
Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network
CVE-2026-78017
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual o
CVE-2026-106346
Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially e
CVE-2026-106343
Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker
CVE-2026-19481
### Impact Versions of `@fastify/busboy` from 1.0.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The multi
CVE-2026-104432
Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-ha
CVE-2026-104432
Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-ha
CVE-2026-100296
In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web ser
CVE-2026-95330
Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass syste