共收录 1180 条相关情报。
← 返回所有主题CVE-2026-104041
A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the
CVE-2026-105758
### Summary An unauthenticated remote attacker can exhaust the memory of the vLLM API-server process by raising the req
CVE-2026-104845
# Summary deserializeTypedArray casts the source node to ArrayBuffer without checking it and never bounds the element c
CVE-2026-105758
vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and
CVE-2026-105747
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos
CVE-2026-94201
Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a fil
CVE-2026-105686
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a
CVE-2026-104713
Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is r
CVE-2026-104893
Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user
CVE-2026-104893
Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user
CVE-2026-105127
LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password
CVE-2026-105127
CVE-2026-105127 涉及 LaraDashboard 在 1.4.2 至 1.4.8 之前的版本中存在的资源耗尽与安全校验失效问题。该产品在面向未认证用户的「忘记密码」和「重置密码」流程中，默认启用了较为严格的高级邮箱地址验证逻
CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ra
CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ra
CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ra
CVE-2026-104845
Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to
CVE-2026-94657
Allocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings. This issue affec
CVE-2026-94656
Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects
CVE-2026-94655
Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift
CVE-2026-83632
Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnera