A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils...
CVE-2026-8724
A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file
2026-05-17 归档
今日共收录 761 条安全情报，包含 52 个 CVE，439 篇安全通告，以及 15 篇研究论文。
← 返回归档列表Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-6050
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because...
CVE-2026-46728
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted fro
WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that...
CVE-2021-47979
WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated at
WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows...
CVE-2021-47975
WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inj
My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the...
CVE-2021-47971
My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting e
Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers...
CVE-2021-47980
Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database
Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input...
CVE-2020-37245
Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attac
Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter...
CVE-2020-37243
Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenti
bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to...
CVE-2020-37241
bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative a
Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows...
CVE-2020-37242
Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute
Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the...
CVE-2021-47969
Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting exc
Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows...
CVE-2021-47942
Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attacke
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated...
CVE-2020-37246
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and d
ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated...
CVE-2021-47978
ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary
LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to...
CVE-2021-47954
LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queri
MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to...
CVE-2021-47934
MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts
Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows...
CVE-2020-37247
Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local att
Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated...
CVE-2020-37244
Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbi
TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows...
CVE-2021-47976
TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload a