最近六个月的全部 CVE，每天更新。

显示 4 条中的 4 条

• 高CVE-2026-77584CVSS 评分 7.02026年8月20日

  Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit stream that would later end

  CWE-821torproject tor
• 中CVE-2026-56132CVSS 评分 6.92026年6月19日

  In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

  CWE-821libexpat_project libexpat
• 严重CVE-2026-43198CVSS 评分 9.82026年5月6日

  In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late. After tcp_v4_syn_recv_sock(), the child socket is al

  CWE-362CWE-821linux linux_kernel
• 中CVE-2026-21919CVSS 评分 6.52026年4月9日

  An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service (DoS) of the management plane. When NETCONF se

  CWE-821juniper junosjuniper junos_os_evolved