漏洞列表

按严重度 / 渠道 / 厂商 / 时间筛选公开漏洞条目。

按严重度筛选严重高危中危低危 CISA KEV 在册

软件类别办公软件生产软件 Web 应用

可利用性 PRO 可利用（在野）有 PoC 未确认了解付费接入 →

清除全部筛选

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Poi…

低危 2.9

CVE-2025-69873 · 2026-07-21 · auto

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data re…

VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time password (OTP) verificat…

低危 3.7

CVE-2026-26227 · 2026-07-14 · auto

VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time password (OTP) verification. The Remote Acces…