按严重度 / 渠道 / 厂商 / 时间筛选公开漏洞条目。
CVE-2008-4128 · 2026-07-14 · draft
Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "al…
CVE-2026-62947 · 2026-07-21 · auto
OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller's ubus session file ACL before canonicalization, and r…
CVE-2026-50456 · 2026-07-21 · auto
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
CVE-2026-50453 · 2026-07-21 · auto
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-50445 · 2026-07-21 · auto
Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVE-2026-50442 · 2026-07-21 · auto
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
CVE-2026-50394 · 2026-07-21 · auto
Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.
CVE-2026-45626 · 2026-07-21 · auto
Arcane is an interface for managing Docker containers, images, networks, and volumes. In 1.18.1 and earlier, GET /environments/{id}/volumes/{volumeName}/browse accepts a path query parameter that is passed to a shell com…
CVE-2026-6478 · 2026-07-21 · auto
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the defaul…
CVE-2026-44885 · 2026-07-21 · auto
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, Portainer's b…
CVE-2026-44884 · 2026-07-21 · auto
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8 and 2.39.1, a …
CVE-2026-46843 · 2026-07-21 · auto
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to com…
CVE-2026-46842 · 2026-07-21 · auto
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to com…
CVE-2026-46841 · 2026-07-21 · auto
Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to …
CVE-2026-46830 · 2026-07-21 · auto
Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2018-25239 · 2026-07-21 · draft
Smart VPN 1.1.3.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the search interface. Attackers can paste a buffer of 2100 character…
CVE-2017-20233 · 2026-07-21 · auto
Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, al…
CVE-2023-4693 · 2026-07-21 · auto
An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A succe…
CVE-2026-50483 · 2026-07-21 · auto
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
CVE-2026-50473 · 2026-07-21 · auto
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
CVE-2026-50437 · 2026-07-21 · auto
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-50434 · 2026-07-21 · auto
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.
CVE-2026-50432 · 2026-07-21 · auto
Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.
CVE-2026-50431 · 2026-07-21 · auto
Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability
CVE-2026-50430 · 2026-07-21 · auto
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.
CVE-2026-27222 · 2026-07-20 · auto
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or render …
CVE-2026-5889 · 2026-07-20 · auto
Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack. (Chromium security severity: Medium)
CVE-2025-48651 · 2026-07-20 · auto
In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution …
CVE-2026-34978 · 2026-07-20 · auto
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in notify-recipient-uri (e.g., rss:///../job.ca…
CVE-2026-23472 · 2026-07-20 · auto
In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN uart_write_room() and uart_write() behave inconsistently when xmit_buf is NULL (which …
CVE-2026-58528 · 2026-07-20 · auto
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-57982 · 2026-07-20 · auto
Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network.
CVE-2026-57973 · 2026-07-20 · auto
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.
CVE-2026-57095 · 2026-07-20 · auto
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally.
CVE-2026-50401 · 2026-07-20 · auto
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.
CVE-2026-50383 · 2026-07-20 · auto
Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
CVE-2026-50376 · 2026-07-20 · auto
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVE-2026-50352 · 2026-07-20 · auto
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVE-2026-50341 · 2026-07-20 · auto
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-50339 · 2026-07-20 · auto
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.
CVE-2026-57979 · 2026-07-20 · auto
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVE-2026-57976 · 2026-07-20 · auto
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-57097 · 2026-07-20 · auto
Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-54997 · 2026-07-20 · auto
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
CVE-2024-30096 · 2026-07-20 · auto
Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2024-30076 · 2026-07-20 · auto
Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2024-30069 · 2026-07-20 · auto
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-30067 · 2026-07-20 · auto
Winlogon Elevation of Privilege Vulnerability
CVE-2024-30066 · 2026-07-20 · auto
Winlogon Elevation of Privilege Vulnerability
CVE-2024-30065 · 2026-07-20 · auto
Windows Themes Denial of Service Vulnerability