2026-05-08 归档

今日共收录 1100 条安全情报，包含 294 个 CVE，452 篇安全通告，以及 61 篇研究论文。

漏洞预警2026-05-07 发布INFO

The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.53.0. This is due to the listen_for_saving_export_schedule() f...

CVE-2026-6214

The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.53.0.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-07 发布INFO

Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.

CVE-2026-44602

Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-05-07 发布INFO

Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.

CVE-2026-44601

Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close o

历史摘要 · 未重新核验 · NVD

#cve #cwe-837

漏洞预警2026-05-07 发布INFO

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3....

CVE-2026-42217

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-05-07 发布INFO

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3....

CVE-2026-42216

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, the incomplete SSRF fix in Admidio's fetch_metadata.php validates the resolved IP address but passes ...

CVE-2026-42194

Admidio is an open-source user management solution. Prior to version 5.0.9, the incomplete SSRF fix in Admidio's fetch_m

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-05-07 发布INFO

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.26.0 to before versi...

CVE-2026-41891

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati

历史摘要 · 未重新核验 · NVD

#cve #cwe-613

漏洞预警2026-05-07 发布INFO

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.31.1.0 to before ver...

CVE-2026-41890

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-05-07 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom ve...

CVE-2026-41675

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom

历史摘要 · 未重新核验 · NVD

#cve #cwe-91

漏洞预警2026-05-07 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom ve...

CVE-2026-41674

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom

历史摘要 · 未重新核验 · NVD

#cve #cwe-91

漏洞预警2026-05-07 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom ve...

CVE-2026-41673

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom

历史摘要 · 未重新核验 · NVD

#cve #cwe-674

漏洞预警2026-05-07 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom ve...

CVE-2026-41672

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom

历史摘要 · 未重新核验 · NVD

#cve #cwe-91

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, the OIDC token introspection endpoint (/modules/sso/index.php/oidc/introspect) always returns {"activ...

CVE-2026-41671

Admidio is an open-source user management solution. Prior to version 5.0.9, the OIDC token introspection endpoint (/modu

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, the SAML IdP implementation in Admidio's SSO module uses the AssertionConsumerServiceURL value direct...

CVE-2026-41670

Admidio is an open-source user management solution. Prior to version 5.0.9, the SAML IdP implementation in Admidio's SSO

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-601

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio SAML Identity Provider implementation discards the return value of its validateSignature(...

CVE-2026-41669

Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio SAML Identity Provider implement

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, several administrative operations in Admidio's preferences module (database backup, test email, htacc...

CVE-2026-41663

Admidio is an open-source user management solution. Prior to version 5.0.9, several administrative operations in Admidio

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, Role::stopMembership() does not verify whether removing a user from the administrator role leaves zer...

CVE-2026-41662

Admidio is an open-source user management solution. Prior to version 5.0.9, Role::stopMembership() does not verify wheth

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, an unauthenticated attacker can execute arbitrary JavaScript in any Admidio user's browser through a ...

CVE-2026-41661

Admidio is an open-source user management solution. Prior to version 5.0.9, an unauthenticated attacker can execute arbi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, a logic error in Admidio's two-factor authentication reset inverts the authorization check. Non-admin...

CVE-2026-41660

Admidio is an open-source user management solution. Prior to version 5.0.9, a logic error in Admidio's two-factor authen

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, the member assignment DataTables endpoint (members_assignment_data.php) includes hidden profile field...

CVE-2026-41659

Admidio is an open-source user management solution. Prior to version 5.0.9, the member assignment DataTables endpoint (m

历史摘要 · 未重新核验 · NVD

#cve #cwe-200