Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows...
CVE-2021-47972
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the applica
2026-05-17 归档
今日共收录 761 条安全情报，包含 52 个 CVE，439 篇安全通告，以及 15 篇研究论文。
← 返回归档列表Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the...
CVE-2021-47970
Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating
EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated...
CVE-2021-47956
EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da
VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX...
CVE-2021-47974
VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise serv
WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand...
CVE-2020-37235
WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows auth
CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows...
CVE-2020-37238
CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content
NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows...
CVE-2020-37236
NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrat
WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that...
CVE-2020-37233
WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated att
Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows...
CVE-2020-37237
Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to
Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler...
CVE-2020-37234
Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local
Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2020-37240
Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrat
Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the...
CVE-2020-37230
Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allow
Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service...
CVE-2020-37231
Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local a
Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the...
CVE-2020-37232
Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService
OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv...
CVE-2020-37229
OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows loc
HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows...
CVE-2020-37227
HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass cl
The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is...
CVE-2025-4202
The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized mo
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names...
CVE-2026-46719
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newli
Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the...
CVE-2026-8657
Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() a
The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-8681
The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi