2026-04-29 归档

今日共收录 828 条安全情报,包含 0 个 CVE,482 篇安全通告,以及 32 篇研究论文。

← 返回归档列表
安全公告2026-04-29 发布INFO

This vulnerability exists in e-Sushrut due to improper access control in resource access...

CVE-2026-42515

This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated at

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly...

CVE-2026-42412

Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for...

CVE-2026-42517

This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An au

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

This vulnerability exists in e-Sushrut due to improper authorization checks during resource...

CVE-2026-42516

This vulnerability exists in e-Sushrut due to improper authorization checks during resource access. An authenticated att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client...

CVE-2026-42513

This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response paramete

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses....

CVE-2026-42514

This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses. A remote attacker coul

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting...

CVE-2026-42377

Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Co

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “...

CVE-2026-3325

SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/ge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected...

CVE-2026-35155

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026...

CVE-2026-21023

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe...

CVE-2026-42615

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request...

CVE-2026-23773

Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A flaw has been found in RemoteClinic up to 2.0. This vulnerability affects unknown code of the...

CVE-2025-9773

A flaw has been found in RemoteClinic up to 2.0. This vulnerability affects unknown code of the file /staff/edit.php. Ex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A vulnerability was determined in mrvautin expressCart up to...

CVE-2025-9797

A vulnerability was determined in mrvautin expressCart up to b31302f4e99c3293bd742c6d076a721e168118b0. This impacts an u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function...

CVE-2025-9769

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Delta Electronics DIAView has an authentication bypass vulnerability.

CVE-2025-58318

Delta Electronics DIAView has an authentication bypass vulnerability.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of...

CVE-2025-9747

A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of the file assets/controlle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This...

CVE-2025-9741

A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue...

CVE-2025-9742

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown pr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element...

CVE-2025-9745

A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element is an unknown function o

历史摘要 · 未重新核验 · GitHub Advisory