Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to...
CVE-2021-47973
Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by p
2026-05-17 归档
今日共收录 761 条安全情报，包含 52 个 CVE，439 篇安全通告，以及 15 篇研究论文。
← 返回归档列表CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers...
CVE-2021-47955
CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary Ja
libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to...
CVE-2020-37239
libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety check
iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that...
CVE-2020-37228
iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass
Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS)...
CVE-2026-8656
Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS) via the annotated format
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and...
CVE-2026-46363
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that byp
phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha:...
CVE-2026-46364
phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and
PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow...
CVE-2021-47967
PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload...
CVE-2021-47965
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor com
phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts...
CVE-2026-45010
phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where...
CVE-2026-46361
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and resu
Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account...
CVE-2021-47962
Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows
AVideo: 2FA toggle endpoint has no CSRF protection, letting an attacker page silently disable a logged-in victim's 2FA
CVE-2026-45610
## Summary **Type:** Cross-site request forgery on the 2FA toggle. `plugin/LoginControl/set.json.php` accepts `POST typ
Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site...
CVE-2026-23695
Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in t
An Improper Access Control vulnerability in several internal API endpoints for Google Cloud...
CVE-2026-2031
An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prio
Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration
CVE-2026-45715
### Summary The REST datasource integration follows HTTP redirects without re-checking the IP blacklist, allowing an au
Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validation
CVE-2026-45548
## Vulnerability Details **CWE-918**: Server-Side Request Forgery (SSRF) The `processUrlFile` function in `packages/se
Firewall for AI
Akamai 安全研究发布了名为 'Firewall for AI' 的产品页面，该产品旨在利用人工智能技术增强防火墙对 DDoS 攻击和僵尸网络的防御能力。虽然文章未提供详细技术细节，但从标签推测，该解决方案可能整合了机器学习模型以实时识
arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS
### Summary Three medium-severity issues in arnika affecting the UDP key-rotation protocol, PQC key file handling, and K
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms
CrowdStrike 被 Frost & Sullivan 评为 2026 年云原生应用保护平台（CNAPP）雷达的领导者。该评估基于对市场参与者产品能力、技术创新及战略愿景的综合分析。CrowdStrike 凭借其 Falcon 平台在