Vulnerability Category
Vulnerability Category
2026-05-01 归档
今日共收录 1019 条安全情报，包含 232 个 CVE，445 篇安全通告，以及 40 篇研究论文。
← 返回归档列表Industrial Topic Reward
Industrial Topic Reward
Relevant Instructions
Relevant Instructions
Vulnerability Definition
Vulnerability Definition
Chrome Dev for Desktop Update
The Dev channel has been updated to 149.0.7815.2 for Windows, Mac and Linux.A partial list of changes is available in th
MFSA 2026-39Security Vulnerabilities fixed in Thunderbird 140.10.1
MFSA 2026-39Security Vulnerabilities fixed in Thunderbird 140.10.1
MFSA 2026-38Security Vulnerabilities fixed in Thunderbird 150.0.1
MFSA 2026-38Security Vulnerabilities fixed in Thunderbird 150.0.1
A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.
CVE-2026-36767
A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary f
An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and w...
CVE-2026-36760
An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with
Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attac...
CVE-2022-50993
Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability
Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0...
CVE-2026-4670
Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Byp
When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bo...
CVE-2026-35547
When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of vali
Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile ty...
CVE-2026-7381
Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middle
Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie va...
CVE-2018-25318
Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to
Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validati...
CVE-2018-25316
Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vulnerability in Wazu...
CVE-2026-30893
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to befo
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function...
CVE-2026-7548
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function sub_41A68C of the file
A weakness has been identified in SourceCodester Advanced School Management System 1.0. The...
CVE-2026-7545
A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unkno
A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function...
CVE-2026-7536
A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function bsf_sess_add_by_ip_addres
A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function...
CVE-2026-7519
A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/Uploa