framework_base_AOSP10_r33_CVE-2020-0137

此存储库没有 README。...

packages_apps_Nfc_AOSP10_r33_CVE-2020-0215

このリポジトリには README がありません。...

YesWiki Archived Revision - Cross-Site Scripting

YesWiki's archived-revision view reflects the time GET parameter into a hidden HTML input in handlers/page/show.php without escaping. Because MySQL coerces malformed DATETIME strings, an attacker can append an XSS payload after a valid revision timestamp. id: CVE-2026-52773 info: name: YesWiki...

Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass

Discourse versions before 2026.1.2, 2026.2.1, and 2026.3.0-latest.1 contain an authorization bypass in PostsControllerdisplaypost. The controller calls post.reverttoparams:version directly whenever a version query parameter is present, without checking whether the corresponding PostRevision is...

Apple-Platform-Security-Guides

Apple 平台安全指南 每一份 Apple 平台安全指南 （更早的 iOS 安全指南 与更早的 OS X/ macOS 白皮书） Apple 官方文档修订历史 日期| macOS| iOS| watchOS| 备注 ---|---|---|---|--- 2019 年秋季| 10.15.2| 13.3| 6.1.1| 2020 年春季| 10.15.4| 13.4| 6.2| 2021 年 2 月| 11.1| 14.3| 7.2| 2021 年 5 月| 11.3| 14.5| 7.4| 2022 年 5 月| 12.3| 15.4| 8.5| 2022 年 12 月| 12.3|...

AlmaLinux 9.2 [TuxCare] Security Update: mod_dav_svn / python3-subversion / subversion / subversion-devel / etc (ALMALINUX9.2:CLSA-2025:1754941300)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754941300 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

CentOS Linux 6 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS6:CLSA-2025:1755074254)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1755074254 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated use...

CLEANSTART-2026-YR55229 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

CLEANSTART-2026-JB28862 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

CLEANSTART-2026-MV02449 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

CentOS Linux 8.4 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS8.4:CLSA-2025:1756408610)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1756408610 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

Rocky Linux 9.6 [TuxCare] Security Update: mod_dav_svn / python3-subversion / subversion / subversion-devel / etc (ALMALINUX9.6:CLSA-2026:1778495013)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778495013 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticat...

AlmaLinux 9.6 [TuxCare] Security Update: mod_dav_svn / python3-subversion / subversion / subversion-devel / etc (ALMALINUX9.6:CLSA-2026:1778495013)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778495013 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

CVE-2026-100241 Private change tags exposed to anonymous users via revision-tags-change events

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha...

CVE-2026-100241

The Wikimedia Foundation Mediawiki - EventBus Extension (version 1.47.0-alpha ) is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Specifically, private change tags are exposed to anonymous users via revision-tags-change events . This flaw allows for the...

CVE-2026-100241 Private change tags exposed to anonymous users via revision-tags-change events

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha...

CVE-2026-100653

A flaw was found in vLLM. When operators configure a deployment to use a specific, pinned model revision, vLLM fails to apply the revision pin to certain supporting artifacts, such as model processors and configuration files. Consequently, these components are loaded from the external repository'...

EUVD-2026-87698

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

CVE-2026-100653: Use of Less Trusted Source

vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-supplied model revision pin --revision / --code-revision is not propagated to several Hugging Face artifact loads for the FunAudioChat and Tarsier2 architectures: the...

PT-2026-99118

Name of the Vulnerable Software and Affected Versions Mediawiki - WikiLambda Extension version 1.47.0-alpha Description An information exposure issue in the Mediawiki - WikiLambda Extension allows unauthorized actors to perform excavation, enabling the viewing of revision-deleted pages. This occu...