The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to,...
CVE-2026-4805
The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.0 T
2026-04-28 归档
今日共收录 1050 条安全情报，包含 258 个 CVE，457 篇安全通告，以及 29 篇研究论文。
← 返回归档列表In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from...
CVE-2026-40966
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histo
In Spring AI, having access to a shared environment can expose the ONNX model used by the...
CVE-2026-40979
In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected version
Penetration Testing engineers at Amazon have identified a security flaw related to request...
CVE-2024-54013
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server co
Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3...
CVE-2025-10539
Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can p
In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that...
CVE-2026-41526
In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed...
CVE-2024-54012
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate i
A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the...
CVE-2026-7247
A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function file_exten_asp of th
A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the...
CVE-2026-7233
A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function fz_subset_cff_for_gid
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to...
CVE-2024-54011
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data sup
A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue is some...
CVE-2026-7237
A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue is some unknown functionality
SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute...
CVE-2026-40978
SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via c
KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to...
CVE-2026-41525
KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of th
A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to...
CVE-2026-7235
A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185aa7ff0d864581257008077b4010fca
A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the...
CVE-2026-7238
A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PH
In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable...
CVE-2026-40980
In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when ha
The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to,...
CVE-2026-4911
The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 Th
A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is an...
CVE-2026-7230
A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is an unknown function. The manip
In Spring AI, various FilterExpressionConverter implementations accept a filter expression object...
CVE-2026-40967
In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to
The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement,...
CVE-2026-5306
The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unau