CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content Manager access to inject malicious scripts through SVG f...

CVE-2020-37238

CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content

历史摘要 · 未重新核验 · NVD

Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the banner management i...

CVE-2020-37237

Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to

历史摘要 · 未重新核验 · NVD

NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the title paramet...

CVE-2020-37236

NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrat

历史摘要 · 未重新核验 · NVD

WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows authenticated users to inject malicious scripts by manipulati...

CVE-2020-37235

WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows auth

历史摘要 · 未重新核验 · NVD

Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized...

CVE-2020-37234

Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local

历史摘要 · 未重新核验 · NVD

WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject malicious scri...

CVE-2020-37233

WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated att

历史摘要 · 未重新核验 · NVD

Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to esc...

CVE-2020-37232

Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService

历史摘要 · 未重新核验 · NVD

Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting the service...

CVE-2020-37231

Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local a

历史摘要 · 未重新核验 · NVD

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting th...

CVE-2020-37230

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allow

历史摘要 · 未重新核验 · NVD

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executab...

CVE-2020-37229

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows loc

历史摘要 · 未重新核验 · NVD

HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrar...

CVE-2020-37227

HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass cl

历史摘要 · 未重新核验 · NVD

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted so...

CVE-2026-46719

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newli

历史摘要 · 未重新核验 · NVD

The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t...

CVE-2025-4202

The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized mo

历史摘要 · 未重新核验 · NVD

Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/formatters/jsonpatch.patch() APIs. An at...

CVE-2026-8657

Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() a

历史摘要 · 未重新核验 · NVD

Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS) via the annotated formatter due to improper sanitization of JSON values and prope...

CVE-2026-8656

Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS) via the annotated format

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

该文章为阿里云安全团队举办的第四届阿里CTF安全挑战赛决赛直播通知，发布于先知社区。比赛旨在通过实战化CTF形式提升安全人员攻防能力，决赛于2026年5月17日进行直播。文章内容仅涉及比赛日程、赛制说明及观看方式，未涉及任何真实攻击事件、漏

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该文章为阿里云2027届实习生招聘启事，发布于先知社区。内容主要面向网络安全领域的在校学生，介绍阿里云安全团队的实习生岗位，包括岗位要求、工作内容和福利待遇等。文章不涉及任何攻击活动、漏洞、恶意软件或威胁情报，属于正常的招聘宣传。

历史摘要 · 未重新核验 · 先知社区

网络安全信息与动态周报-2026年第14期

本报告为CNCERT（国家互联网应急中心）发布的2026年第14期网络安全信息与动态周报，发布日期为2026年5月17日。该周报作为国家级网络安全通报机制的一部分，旨在总结一周内国内外的网络安全态势、重要漏洞、攻击活动及安全事件。然而，本次

历史摘要 · 未重新核验 · CNCERT

网络安全信息与动态周报-2026年第12期

本报告为国家互联网应急中心（CNCERT）发布的《网络安全信息与动态周报-2026年第12期》，汇总了2026年4月27日至5月3日期间国内外网络安全动态。报告内容涵盖重要网络安全事件、漏洞信息、恶意程序传播情况、网站安全态势及安全建议等。

历史摘要 · 未重新核验 · CNCERT

Control CenterAccess the Akamai platform

Control CenterAccess the Akamai platform

历史摘要 · 未重新核验 · Akamai Security Research