No Title
### Summary Fiber cache middleware's default key generator uses only `c.Path()` and does not include the query string. A
2026-04-29 归档
今日共收录 828 条安全情报，包含 0 个 CVE，482 篇安全通告，以及 32 篇研究论文。
← 返回归档列表Schneider Electric产品基于栈的缓冲区溢出漏洞
Schneider Electric产品基于栈的缓冲区溢出漏洞
【云数据库 SQL Server】关于风险触发器新建、修改及迁移限制的公告
【云数据库 SQL Server】关于风险触发器新建、修改及迁移限制的公告
TodayMail邮件系统 webmail/main/letter.inc.php 文件 typeid参数 SQL漏洞
TodayMail邮件系统 webmail/main/letter.inc.php 文件 typeid参数 SQL漏洞
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-42646
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPr
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
CVE-2026-42644
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs bette
Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode...
CVE-2026-42645
Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Or
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-42652
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Reg
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-42643
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Wi
Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg...
CVE-2026-42648
Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrec
Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly...
CVE-2026-42642
Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Sec
Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to...
CVE-2026-42249
Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of at
Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image...
CVE-2026-42641
Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request F
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static...
CVE-2026-22741
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely,
The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-2902
The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving...
CVE-2026-22745
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More
Ollama for Windows does not perform integrity or authenticity verification of downloaded update...
CVE-2026-42248
Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike othe
A WebFlux server application that processes multipart requests creates temp files for parts...
CVE-2026-22740
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some
This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded...
CVE-2026-42518
This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in c
The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data...
CVE-2026-4019
The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions