2026-05-03 归档

今日共收录 715 条安全情报,包含 73 个 CVE,373 篇安全通告,以及 10 篇研究论文。

← 返回归档列表
安全公告2026-05-02 发布INFO

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4

CVE-2026-6525

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function...

CVE-2026-7609

A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function...

CVE-2026-7611

A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function platform_do_upgrade_cameo_dev

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an...

CVE-2026-7612

A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown function of the fil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the ...

CVE-2026-4061

The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'map_post_type' parameter in all v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0. This vulnerability...

CVE-2026-7627

A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0. This vulnerability affects the function Call

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort'...

CVE-2026-4060

The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Paid Memberships Pro plugin for WordPress is vulnerable to unauthorized modification and...

CVE-2026-4100

The Paid Memberships Pro plugin for WordPress is vulnerable to unauthorized modification and disruption of Stripe webhoo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Salon Booking System – Free Version plugin for WordPress is vulnerable to Arbitrary File Read...

CVE-2026-6320

The Salon Booking System – Free Version plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is...

CVE-2026-4790

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored C

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01. This affects an unknown function...

CVE-2026-7610

A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01. This affects an unknown function of the file /www/cgi/ssi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...

CVE-2026-6817

The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' parameter

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing...

CVE-2026-7491

School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote...

CVE-2026-7489

CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in...

CVE-2026-5077

The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and includ

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged...

CVE-2026-7490

CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to up

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the...

CVE-2026-7607

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto_update_firmware

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site...

CVE-2026-5324

The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup...

CVE-2026-7649

The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Royal Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of...

CVE-2026-4024

The Royal Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing

历史摘要 · 未重新核验 · GitHub Advisory