Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

security — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in security, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the vendor Product, specifically focusing on the security product line and its associated weakness types. The collection encompasses a comprehensive range of security flaws, including buffer overflows, authentication bypasses, and privilege escalation issues, covering all disclosed incidents from the product's initial release through the current date. Visitors can utilize this resource to track the vendor's official security advisories, analyze the prevalence and characteristics of specific weakness classes within this product family, or review the complete historical record of vulnerabilities affecting the security product. The data is organized to facilitate efficient searching and filtering, allowing security professionals to quickly identify relevant threats without navigating through disparate sources. By consolidating these records, the page serves as a central reference point for understanding the security posture of the product over time. Users seeking to assess risk, plan remediation strategies, or conduct compliance audits will find the chronological listing and detailed weakness classifications particularly useful for their analysis. This aggregation ensures that all known security defects are accessible in a single, structured view, supporting informed decision-making for system administrators and security researchers alike.

Vendor: kernel

CVE ID Title CVSS Severity Published
CVE-2026-55176 Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token CWE-863 9.0 Critical 2026-09-30
CVE-2026-46711 Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network CWE-306 8.3 High 2026-09-30
CVE-2025-64113 Emby Server allows attackers to gain administrative server access without preconditions CWE-640 8.1AI High AI 2025-12-09
CVE-2023-45807 OpenSearch Issue with tenant read-only permissions CWE-281 5.4 Medium 2023-10-16
CVE-2023-33193 Emby Server Proxy Header Spoofing Vulnerability CWE-444 9.1 Critical 2023-05-30
CVE-2023-31141 OpenSearch issue with fine-grained access control during extremely rare race conditions CWE-863 4.8 Medium 2023-05-08
CVE-2023-25806 Time discrepancy in authentication responses in OpenSearch CWE-208 5.3 - 2023-03-02
CVE-2023-23612 Issue with whitespace in JWT roles in OpenSearch CWE-287 4.7 Medium 2023-01-24
CVE-2023-23613 Field-level security issue with .keyword fields in OpenSearch CWE-200 5.7 Medium 2023-01-24
CVE-2022-41918 Issue with fine-grained access control of indices backing data streams CWE-863 6.3 Medium 2022-11-15
CVE-2022-35980 OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information CWE-612 7.5 High 2022-08-12
CVE-2021-29802 IBM Security SOAR 安全漏洞 8.1 - 2021-08-23
CVE-2021-29704 IBM Security SOAR 加密问题漏洞 7.5 - 2021-08-23
CVE-2021-29495 Nim stdlib httpClient does not validate peer certificates by default CWE-295 5.9 Medium 2021-05-07
CVE-2021-21373 Nimble falls back to insecure http url when fetching packages CWE-348 7.5 High 2021-03-26
CVE-2021-21374 Nimble fails to validate certificates due to insecure httpClient defaults CWE-348 8.1 High 2021-03-26
CVE-2021-21372 Nimble arbitrary code execution for specially crafted package metadata CWE-20 8.3 High 2021-03-26
CVE-2016-9604 Linux kernel 安全漏洞 CWE-732 4.4 - 2018-07-11

All 18 known CVE vulnerabilities affecting security with full Chinese analysis, references, and POCs where available.