探How 社区

Search Common Vulnerabilities and Exposures (CVEs), or drop a dependency file to find known vulnerabilities and source-backed fix information. Or explore the full CVE catalog below.

以下正文同步自 Hacker News 最新，版权归原站所有，已转换为易读排版。

Search Common Vulnerabilities and Exposures (CVEs), or drop a dependency file to find known vulnerabilities and source-backed fix information. Or explore the full CVE catalog below.

Lockfiles, pinned requirements, or CycloneDX / SPDX JSON · up to 10 files, 10 MiB total

Files stay in your browser. Only extracted package identities and versions are sent for lookup.

npm package-lock / shrinkwrap, pnpm, Yarn Classic / Berry, Bun text locks, Poetry, uv, pylock, Pipfile, requirements, Cargo, Composer, Bundler, Go, NuGet packages.lock.json, Swift Package.resolved, Pub, Gradle, R renv, Julia, package-list JSON, and CycloneDX / SPDX 2.x JSON.

Binary locks and unresolved versions cannot be verified. The browser splits large inventories into small API batches. Agent API documentation ↗

Field Collection for Drupal 7 access bypass via missing parent entity access check

Unverified Sign in with Apple callback parameter can override verified ID token claims

minimatch: potential denial of service via globparts amplification

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps

secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication

Coop sessions are not invalidated on password reset

Coop has SAML cross-tenant authentication bypass

Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUser

Coop has a data leak via unauthenticated GraphQL Query.allOrgs

Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg

i18next: Shared built-in corruption through inherited-key deepExtend recursion

Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

Samba: missing access check on reparse point operations

IXP Manager has authenticated non-administrator privilege escalation

IXP Manager has Broken Object-Level Authorization

OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution

Enforce maximum recursion depth in encoding/asn1

Quadratic complexity in WordDecoder.DecodeHeader in mime

TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover

Quest Bot: Server Side Request Forgery in the Image to GIF Feature Lets Any Server Member Reach Internal Services

Hydra: Deposit Claim omits Head state-token spending requirement

WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability

Refitter: C# source injection through OpenAPI header parameter names

WordPress Fast Velocity Minify plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability

WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability

WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability

WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability

WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability

Crass: A large number of adjacent CSS comments can trigger a SystemStackError

Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check

asn1c: ASAN crash with decode of open types

Refitter: C# source injection through OpenAPI content-type map keys

WIT SynApps Runtime 1.4.11 Reflected XSS via LINK Parameter

OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy

MyTube: Unauthenticated Media Access via Static Routes Bypassing Login

Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation

HoneySQL unchecked entity names can lead to SQL injection results

Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink

OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification

Refitter: C# source injection through OpenAPI path keys

Tesseract: Crafted LSTM model (WeightMatrix mode byte) triggers ASSERT_HOST abort in WeightMatrix::DeSerializeOld under FAST_FLOAT — Denial of Service

Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)

ThingLinks TDengine TDS APIs vulnerable to unauthenticated SQL injection

LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing

LibreDWG: unbounded allocation in pre-R13 DWG entity decoding

Dream Displays has command-line argument injection in yt-dlp invocation

jack: upstream error responses expose backend and peer credentials

sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites

Aedes has Uncaught Exception and Uncontrolled Resource Consumption

Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules

Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

LubeLogger: IDOR in PrintRecordStickers Allows Unauthenticated Cross-User Vehicle Record Exfiltration

OpenRemote has authenticated SQL injection in crosstab datapoint exports

netopeer2-server logging has format string vulnerability via subtree filter

uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching

uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state reset

Microsoft Office Outlook Remote Code Execution Vulnerability

M365 Copilot Information Disclosure Vulnerability

Microsoft Fabric Elevation of Privilege Vulnerability

Azure Database for PostgreSQL Elevation of Privilege Vulnerability

Azure Billing Elevation of Privilege Vulnerability

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

Copilot Studio Elevation of Privilege Vulnerability

Azure AI Language Elevation of Privilege Vulnerability

Microsoft Discovery Studio Information Disclosure Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Skype for Business and Lync Denial of Service Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

Microsoft Office Excel Information Disclosure Vulnerability

.NET Elevation of Privilege Vulnerability

Microsoft Graphics Component Remote Code Execution Vulnerability

Windows Message Queuing Remote Code Execution Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Imaging Component Remote Code Execution Vulnerability

Microsoft Graphics Component Elevation of Privilege Vulnerability

Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability

Windows Biometric Service Elevation of Privilege Vulnerability

Microsoft Windows Search Component Information Disclosure Vulnerability

Windows Biometric Service Elevation of Privilege Vulnerability

Windows iSCSI Remote Code Execution Vulnerability

Windows WebClient Service Elevation of Privilege Vulnerability

Windows Storage Port Driver Information Disclosure Vulnerability

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Microsoft Office Word Information Disclosure Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Microsoft Azure CLI Remote Code Execution Vulnerability

Microsoft Power Automate Desktop Elevation of Privilege Vulnerability

ASP.NET Core Denial of Service Vulnerability

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Visual Studio Remote Code Execution Vulnerability