APSB26-53: Security update available for Content Credentials SDK
APSB26-53: Security update available for Content Credentials SDK
2026-05-13 归档
今日共收录 822 条安全情报，包含 0 个 CVE，457 篇安全通告，以及 56 篇研究论文。
← 返回归档列表APSB26-54: Security update available for Adobe Substance 3D Sampler
APSB26-54: Security update available for Adobe Substance 3D Sampler
APSB26-55: Security update available for Adobe Substance 3D Painter
APSB26-55: Security update available for Adobe Substance 3D Painter
OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover
CVE-2026-44720
### Overview A critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access
Astro: Server island encrypted parameters vulnerable to cross-component replay
CVE-2026-45028
### Impact Astro versions prior to 6.1.10 used AES-GCM encryption to protect the confidentiality and integrity of serve
Klever-Go MultiDataInterceptor has remote OOM via crafted compressed P2P payload
CVE-2026-44697
## Summary A remote, unauthenticated denial-of-service vulnerability in `Batch.Decompress` (`data/batch/batch.go`) allo
Mapfish Print: Remote Code Injection (RCE) in Dynamic table
CVE-2026-44672
### Impact The attacker can execute arbitrary code without being authenticated ### Mitigation Upgrade to a patched ve
The MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) plugin...
CVE-2026-5371
The MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) plugin for WordPress is vulnera
Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor...
CVE-2026-45227
Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated
The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to...
CVE-2026-1250
The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection vi
The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write...
CVE-2026-8108
The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions.
Linux ksmbd contains a remote memory corruption vulnerability in the ACL inheritance path that...
CVE-2026-8449
Linux ksmbd contains a remote memory corruption vulnerability in the ACL inheritance path that allows remote clients wit
The The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to arbitrary...
CVE-2025-15463
The The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to arbitrary shortcode execution in all vers
Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that...
CVE-2026-45225
Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users t
Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that...
CVE-2026-45226
Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by...
CVE-2026-44871
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS
PowerSYSTEM Center feature for device project groups allows an authenticated user with limited...
CVE-2026-35555
PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an
PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to...
CVE-2026-33570
PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normall
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with...
CVE-2026-26289
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to
UltraJSON has a Memory Leak in ujson.dump() on Write Failure
CVE-2026-44660
### Summary When `ujson.dump()` writes to a file-like object and the write operation raises an exception, the serialize