2026-05-16 归档

今日共收录 1030 条安全情报,包含 296 个 CVE,439 篇安全通告,以及 15 篇研究论文。

← 返回归档列表
漏洞预警2026-05-15 发布INFO

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthenticated attacker ...

CVE-2026-41553

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user could craft the html pa...

CVE-2026-41552

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sani

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generate::SHA256 generated session ids insecurely. The default s...

CVE-2026-8503

Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a s...

CVE-2026-8454

Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41971

Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41970

Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41969

Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41968

Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41967

Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41966

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41965

Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availabi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41964

Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availabili

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41963

Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect ava

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41962

Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41961

Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availabil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41960

Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validatio...

CVE-2026-8425

The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 5....

CVE-2026-7563

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to una

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'table' parameter in all versions up to, and inc...

CVE-2026-7046

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to time-based blind SQL Injection

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

The Advanced Custom Fields: Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.0.2. This is due to insufficient inp...

CVE-2026-6415

The Advanced Custom Fields: Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions u

历史摘要 · 未重新核验 · NVD