A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a...
CVE-2026-104038
A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks a
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory...
CVE-2026-104031
A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during succe
A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a...
CVE-2026-104035
A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Den
A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential...
CVE-2026-104034
A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder durin
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map...
CVE-2026-104032
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the aut
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to...
CVE-2026-105471
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87b
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to...
CVE-2026-105469
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to...
CVE-2026-105470
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9
Docling simplifies document processing by parsing diverse formats and providing integrations with...
CVE-2026-105747
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to...
CVE-2026-105468
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled...
CVE-2026-0482
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modificati
Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode
CVE-2026-105750
### Summary When the HTML backend renders pages in a headless browser (`HTMLBackendOptions(render_page=True)`), the `en
vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core
CVE-2026-105753
## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit
Werkzeug safe_join() allows Windows special device names
CVE-2026-102598
Werkzeug's `safe_join` function allows Windows device names as filenames when they have an empty ADS marker on NTFS. Th
PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption
CVE-2026-96747
### Summary PyMongo passed the KMS endpoint of a data key verbatim into `parse_host()`, which returns any string ending
Filament: Multi-factor authentication (app) management actions do not require password reauthentication
CVE-2026-104181
App-based multi-factor authentication management actions did not consistently require the user to confirm their current
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
CVE-2026-102275
### Summary PyJWT accepts internally inconsistent OKP private JWKs where the declared public key `x` does not correspon
vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach
CVE-2026-105758
### Summary An unauthenticated remote attacker can exhaust the memory of the vLLM API-server process by raising the req
vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
CVE-2026-105760
## Summary The OpenAI-compatible chat endpoint accepts request-level video loader options through `media_io_kwargs`. A
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
CVE-2026-105754
## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit