Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers...
CVE-2018-25337
Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized
2026-05-18 归档
今日共收录 756 条安全情报，包含 66 个 CVE，383 篇安全通告，以及 20 篇研究论文。
← 返回归档列表A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This issue affects the...
CVE-2026-8753
A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This issue affects the function parseVideoInf
A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The...
CVE-2026-8755
A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The affected element is th
Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows...
CVE-2018-25338
Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extr
A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This impacts an...
CVE-2026-8758
A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This impacts an unknown function of the file
Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated...
CVE-2018-25339
Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract da
VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to...
CVE-2018-25328
VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction poin
Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows...
CVE-2018-25327
Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform sta
Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer...
CVE-2018-25323
Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer overflow vulnerability that
Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to...
CVE-2018-25334
Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change a user's informa
Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that...
CVE-2018-25333
Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated atta
Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection...
CVE-2018-25330
Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that allow at
Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability...
CVE-2018-25324
Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticat
Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered...
CVE-2018-25325
Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitra
WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows...
CVE-2018-25329
WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers
Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows...
CVE-2018-25322
Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to exe
Joomla jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows...
CVE-2018-25336
Joomla jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify us
Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows...
CVE-2018-25326
Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arb
Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated...
CVE-2018-25319
Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulat
A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function...
CVE-2026-8751
A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function importBinaryModel of the file h