FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read...

CVE-2026-70629

FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the na

历史摘要 · 未重新核验 · GitHub Advisory

FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory...

CVE-2026-70631

FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in

历史摘要 · 未重新核验 · GitHub Advisory

The DataPress (Dataverse Integration) WordPress plugin before 2.91 does not properly restrict...

CVE-2026-5336

The DataPress (Dataverse Integration) WordPress plugin before 2.91 does not properly restrict access to its template ren

历史摘要 · 未重新核验 · GitHub Advisory

Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write...

CVE-2026-41861

Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with

历史摘要 · 未重新核验 · GitHub Advisory

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent...

CVE-2026-43630

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore p

历史摘要 · 未重新核验 · GitHub Advisory

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

CVE-2026-19146

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromis

历史摘要 · 未重新核验 · GitHub Advisory

Craft CMS: Arbitrary file read via SplFileObject in non-sandboxed template contexts

The `create()` Twig function (introduced in 5.9.0) allows instantiation of arbitrary PHP classes from template code, res

历史摘要 · 未重新核验 · GitHub Advisory

h2: Duplicate Host header could facilitate request smuggling

CVE-2026-71554

### Impact h2 <=4.4.0 accepts request header blocks containing more than one Host header, and forwards every Host header

历史摘要 · 未重新核验 · GitHub Advisory

Craft CMS: Authenticated leak of secret environment variables

Environment variables and secrets are interpolated into a Twig template even when the Twig sandbox is enabled, allowing

历史摘要 · 未重新核验 · GitHub Advisory

Craft CMS: Missing authorization check allows non-admin control panel users access to user registration metrics

`ChartsController::actionGetNewUsersData()` at `/actions/charts/get-new-users-data` is missing a `requirePermission('vie

历史摘要 · 未重新核验 · GitHub Advisory

Craft CMS: Stored XSS in the control panel via unescaped draft name

The control-panel helper that renders element chip/card labels writes an element's `draftName` into the page without HTM

历史摘要 · 未重新核验 · GitHub Advisory

node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript

CVE-2026-71498

## Summary `re2` infers a character's byte length from its UTF-8 lead byte alone, with no bound on the bytes actually r

历史摘要 · 未重新核验 · GitHub Advisory

node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length

CVE-2026-71430

## Description `WrappedRE2::Replace` builds the replacement result and hands it to V8 with `.ToLocalChecked()` **withou

历史摘要 · 未重新核验 · GitHub Advisory

jsoup: Cleaner may expose markup with custom raw-text elements

CVE-2026-71497

When a custom `Safelist` permits certain raw-text elements, jsoup may incorrectly sanitize malformed HTML containing a t

历史摘要 · 未重新核验 · GitHub Advisory

Craft CMS: Missing authorization check allows non-admin control panel users to reorder Global Sets

CVE-2026-14793

The `reorder-sets` action in Craft CMS’s `GlobalsController` is missing the `requireAdmin()` check that the adjacent `sa

历史摘要 · 未重新核验 · GitHub Advisory

league/commonmark: Denial of service via deeply nested XML output

### Impact `XmlRenderer` pretty-prints XML by emitting depth-proportional indentation whitespace for **every** opening

历史摘要 · 未重新核验 · GitHub Advisory

league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes

CVE-2026-71478

## Summary The `AttributesExtension`'s `href`/`src` unsafe-link filter (`AttributesHelper::filterAttributes()`) can be

历史摘要 · 未重新核验 · GitHub Advisory

Silverstripe: XSS in breadcrumbs in page list view

CVE-2026-54717

### Impact Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view ### Reporter Fase Rai

历史摘要 · 未重新核验 · GitHub Advisory

AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

CVE-2026-18654

### Summary The AWS Command Line Interface (AWS CLI) is a unified tool to manage AWS services from the command line. An

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid radar diagrams are vulnerable to DoS

CVE-2026-71439

### Impact Mermaid radar diagrams allow arbitrary large values for `ticks`, which can cause high CPU usage, freezing th

历史摘要 · 未重新核验 · GitHub Advisory