漏洞目录
15,219 份公开披露报告，按弱点、厂商与发现过程组织。每条记录保留原文溯源，不做无依据的复述。
15,219公开报告
245弱点类型
428厂商
$4,934,915披露赏金
筛选结果 49 份 · 本页赏金 $15,000 · 清除筛选
漏洞类别
弱点目录
- 信息泄露1,447信息泄露
- XSS（通用）985跨站脚本
- Unlabeled967其他弱点
- 认证缺陷（通用）790身份认证
- 访问控制缺陷（通用）772访问控制
- 反射型 XSS661跨站脚本
- 存储型 XSS643跨站脚本
- 违反安全设计原则（按标题归类）531错误配置
- 资源消耗失控526拒绝服务
- 跨站请求伪造511跨站请求伪造
- 权限提升455访问控制
- 业务逻辑错误392业务逻辑
- IDOR359不安全的直接对象引用
- 代码注入344代码执行
- 开放重定向344开放重定向
- 内存破坏（通用）320内存破坏
- SQL 注入313SQL 注入
- SSRF293服务端请求伪造
- 路径遍历243路径遍历
- 命令注入（通用）234代码执行
- 密码学问题（通用）188密码学缺陷
- DOM 型 XSS178跨站脚本
- Unlabeled145信息泄露
- 点击劫持140错误配置
主要厂商目录 · 16
最新报告
- libcurl TLS shorter-retry mismatch discloses client heap memory during cancelled IMAPS uploadcurl · 内存破坏 · 2026-10-19无赏金低危
- Rustls backend discloses out-of-bounds heap data during legal IMAP upload cancellationcurl · 内存破坏 · 2026-10-05无赏金低危
- 55: Heap-buffer-overflow read in `curl_formadd_ccsid()` with binary form datacurl · 内存破坏 · 2026-09-10无赏金未评级
- 57: Heap out-of-bounds read in `curl_easy_escape_ccsid()` / `curl_easy_unescape_ccsid()`curl · 内存破坏 · 2026-09-07无赏金未评级
- Connector/ODBC: MADB_Stmt::ArrayOffset is not reset when an exception unwinds out of MADB_StmtExecute, so the next paramset reads out of boundsMariaDB · 内存破坏 · 2026-11-04无赏金低危
- Connector/ODBC: SqlwcsOctetLen sizes UTF-16 with a byte-oriented helper, reading past the caller's buffer and sending client memory to the serverMariaDB · 内存破坏 · 2026-11-04无赏金低危
- Out-of-bounds read in MariaDB .frm parsing enables RCE via vtable hijackingMariaDB · 内存破坏 · 2026-09-08 · CVE-2026-107821无赏金中危
- Connector/C Out-of-bounds read from unterminated GSSAPI SPN in `parse_server_packet()`MariaDB · 内存破坏 · 2026-11-04无赏金未评级
- Connector/C Out-of-bounds read in `unpack_fields()` from short metadata fieldMariaDB · 内存破坏 · 2026-09-30无赏金未评级
- Connector/C++: heap out-of-bounds read when malicious server field length exceeds declared column length in binary result pathMariaDB · 内存破坏 · 2026-10-12无赏金低危
- Firecracker Out-of-bounds Read/Write Local Privilege Escalation VulnerabilityAWS VDP · 内存破坏 · 2026-06-11 · CVE-2026-5747无赏金低危
- Conflux-queued zero-length RELAY_END triggers heap out-of-bounds readTor · 内存破坏 · 2026-09-10无赏金低危
- Heap-buffer-overflow in `Curl_ssl_push_certinfo_len()` — sole bounds check is `DEBUGASSERT`curl · 内存破坏 · 2026-04-29无赏金中危
- Function `do_pubkey()` can have out-of-bound read issuecurl · 内存破坏 · 2026-03-25无赏金低危
- Heap Out-of-Bounds Read in lib/http2.c via Malformed PUSH_PROMISE Headerscurl · 内存破坏 · 2026-01-10无赏金中危
- Heap Buffer Over-Read via Malicious SMB Server READ_ANDX Responsecurl · 内存破坏 · 2025-12-20无赏金中危
- Heap Buffer Over-Read via Malicious SMB Server READ_ANDX Responsecurl · 内存破坏 · 2025-12-25无赏金低危
- Heap-buffer-overflow (Out-of-Bounds Read) in DoH hostname encodingcurl · 内存破坏 · 2025-09-04无赏金低危
- Out-Of-Bounds Memory Read on ███U.S. Dept Of Defense · 内存破坏 · 2024-06-18 · CVE-2023-4966无赏金未评级
- CVE-2022-35260: .netrc parser out-of-bounds accesscurl · 内存破坏 · 2022-10-27 · CVE-2022-35260无赏金低危
- Adam and the Deadly Injectionsh1-ctf · 内存破坏 · 2021-06-18无赏金高危
- CS:GO Server -> Client RCE through OOB access in CSVCMsg_SplitScreen + Info leak in HTTP downloadValve · 内存破坏 · 2021-05-17$7,500高危
- Out-of-Bound Read in urldecode() [CVE-2020-7067]Internet Bug Bounty · 内存破坏 · 2020-10-12 · CVE-2020-7067无赏金低危
- OOB reads in network message handlers leads to RCEValve · 内存破坏 · 2021-05-04$7,500高危
- Out-of-bounds Read in php_strip_tags_exInternet Bug Bounty · 内存破坏 · 2020-11-09无赏金低危
第 1 / 2 页下一页 →