An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the...
CVE-2026-44028
An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser
2026-05-05 归档
今日共收录 918 条安全情报，包含 208 个 CVE，383 篇安全通告，以及 47 篇研究论文。
← 返回归档列表The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to,...
CVE-2026-1921
The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via
The Subscribe To Comments Reloaded plugin for WordPress is vulnerable to unauthorized...
CVE-2026-4409
The Subscribe To Comments Reloaded plugin for WordPress is vulnerable to unauthorized modification of data due to a leak
The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is...
CVE-2026-2868
The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Sit
An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix...
CVE-2026-44029
An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "n
A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp...
CVE-2026-7785
A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f2
A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to...
CVE-2026-7788
A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The af
A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some unknown...
CVE-2026-7784
A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some unknown processing of the file
A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the...
CVE-2026-7783
A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the function AbstractKanban::appl
Improper privilege management in the log rotation mechanism of the Skylight Workspace Config...
CVE-2026-7791
Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpace
A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function...
CVE-2026-7782
A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the fil
A security vulnerability has been detected in Open5GS up to 2.7.7. Affected by this issue is the...
CVE-2026-7781
A security vulnerability has been detected in Open5GS up to 2.7.7. Affected by this issue is the function udm_nudm_uecm_
Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a...
CVE-2026-7776
Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition
A weakness has been identified in Open5GS up to 2.7.7. Affected by this vulnerability is the...
CVE-2026-7780
A weakness has been identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function udm_state_operatio
pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 /...
CVE-2026-42313
### Summary The `set_config_value()` API method (`@permission(Perms.SETTINGS)`) in `src/pyload/core/api/__init__.py` ga
net-imap vulnerable to command Injection via unvalidated Symbol inputs
CVE-2026-42258
### Summary Symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol argumen
net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication
CVE-2026-42256
### Summary When authenticating a connection with `SCRAM-SHA1` or `SCRAM-SHA256`, a hostile server can perform a comput
net-imap has quadratic complexity when reading response literals
CVE-2026-42245
### Summary `Net::IMAP::ResponseReader` has quadratic time complexity when reading large responses containing many stri
net-imap vulnerable to STARTTLS stripping via invalid response timing
CVE-2026-42246
### Summary A man-in-the-middle attacker can cause `Net::IMAP#starttls` to return "successfully", without starting TLS.
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection...
CVE-2026-41925
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi bin