Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using...
CVE-2026-8700
Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand fun
2026-05-17 归档
今日共收录 761 条安全情报，包含 52 个 CVE，439 篇安全通告，以及 15 篇研究论文。
← 返回归档列表Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.
CVE-2026-8704
Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the...
CVE-2026-8696
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that a
ORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated Remote...
CVE-2025-67031
ORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated Remote Code Execution vulnera
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the...
CVE-2026-4054
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxie
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce the PostEditTimeLimit...
CVE-2026-4053
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fiel
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer:...
CVE-2026-46360
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that lim
phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in...
CVE-2026-46362
phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermiss
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl()...
CVE-2026-46367
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticate
phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that...
CVE-2026-45008
phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INST
Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated...
CVE-2021-47964
Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitra
phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that...
CVE-2026-46359
phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that allows authenticated atta
phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where...
CVE-2026-45007
phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where 12 endpoints use userIs
Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to...
CVE-2021-47963
Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to execute arbitrary code by in
phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId...
CVE-2026-46366
phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks pe
PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in...
CVE-2021-47966
PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in the login_userid paramet
CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated...
CVE-2021-47958
CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrar
phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api routes...
CVE-2026-45009
phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api routes that allows authenticated
Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows...
CVE-2021-47968
Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to in
phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api...
CVE-2026-46365
phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpo