In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of...
CVE-2026-40356
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an applica
2026-04-28 归档
今日共收录 1050 条安全情报，包含 258 个 CVE，457 篇安全通告，以及 29 篇研究论文。
← 返回归档列表A vulnerability was found in code-projects Coaching Management System 1.0. This affects an...
CVE-2026-7229
A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the...
CVE-2026-7227
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This...
CVE-2026-7226
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects the functi
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability...
CVE-2026-7225
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function d
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the...
CVE-2026-7228
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_coun
A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects...
CVE-2026-7224
A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_car
OpenStack Ironic through 25.0.0 allows ipmitool execution in a non-default configuration that has...
CVE-2026-42510
OpenStack Ironic through 25.0.0 allows ipmitool execution in a non-default configuration that has a console interface.
The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-6809
The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in
A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63. Affected...
CVE-2026-7223
A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63. Affected by this issue is the fun
The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-6725
The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text'
A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this...
CVE-2026-7222
A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unk
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application...
CVE-2026-40355
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_c
The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-6551
The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' a
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the...
CVE-2026-7219
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS
A vulnerability has been found in jackwrichards FastlyMCP up to...
CVE-2026-7220
A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620. This impacts a
A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3. This vulnerability...
CVE-2026-7214
A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3. This vulnerability affects the function read_
A weakness has been identified in donchelo processing-claude-mcp-bridge up to...
CVE-2026-7216
A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd.
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP...
CVE-2026-1460
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zy
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel...
CVE-2026-0711
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions