A weakness has been identified in Z-BlogPHP 1.7.4.3430. This affects the function CheckComment of...
CVE-2026-8747
A weakness has been identified in Z-BlogPHP 1.7.4.3430. This affects the function CheckComment of the file zb_system/fun
2026-05-18 归档
今日共收录 756 条安全情报，包含 66 个 CVE，383 篇安全通告，以及 20 篇研究论文。
← 返回归档列表A weakness has been identified in h2oai h2o-3 up to 7402. This vulnerability affects the function...
CVE-2026-8752
A weakness has been identified in h2oai h2o-3 up to 7402. This vulnerability affects the function exec of the file h2o-c
A vulnerability was identified in h2oai h2o-3 up to 7402. Affected by this issue is the function...
CVE-2026-8750
A vulnerability was identified in h2oai h2o-3 up to 7402. Affected by this issue is the function importFiles of the file
A vulnerability was identified in Open5GS up to 2.7.7. Affected by this vulnerability is the...
CVE-2026-8745
A vulnerability was identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function ogs_timer_add in t
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's...
CVE-2026-8721
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in P
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute o...
CVE-2026-8507
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file,
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsibl...
CVE-2026-42009
GnuTLS 中发现一个安全漏洞（CVE-2026-42009），存在于 Datagram Transport Layer Security (DTLS) 协议的数据包重排序逻辑中。DTLS 为 UDP 上的 TLS 提供安全通信，其数据包
A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the function Login of the file app/Models/Employee.php of the component Employee Login....
CVE-2026-8803
CVE-2026-8803 影响 opensourcepos Open Source Point of Sale 3.4.2 及之前版本。漏洞位于 app/Models/Employee.php 文件的 Login 函数中，该函数在员工登录
SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded...
CVE-2026-7304
CVE-2026-7304 影响 SGLangs 多模态生成运行环境。当启用 --enable-custom-logit-processor 选项时，该环境通过 dill.loads() 对 Python 对象进行反序列化，但未进行任何验证
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process...
CVE-2026-7302
CVE-2026-7302 是一个影响 SGLangs 多模态生成运行时的未认证路径遍历漏洞。该漏洞源于程序在处理特定端点的上传文件名时，未能充分过滤 ../ 序列，使得攻击者能够在无需认证的情况下，将任意文件写入服务器进程具有写入权限的任
Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3 allows an authenticated user to cause the MFserver process t...
CVE-2026-0983
CVE-2026-0983 是 M-Files Server 中的一个拒绝服务（DoS）漏洞。影响版本：26.5.16015.0 之前、26.2 LTS 之前、25.8 LTS SR3 之前的 M-Files Server。攻击者需要经过身
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This issue affects the function getPicThumb of the file app/Controllers/Items.php. The manip...
CVE-2026-8802
CVE-2026-8802 是 Open Source Point of Sale（开源POS系统）中的一个路径遍历漏洞，影响版本 up to 3.4.2。漏洞位于文件 app/Controllers/Items.php 的 getPicT
Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain unauthorized access to protected features by manipulating the HTTP redirect header...
CVE-2026-4320
该漏洞存在于 Creartia 公司的 ICMS 软件中，属于授权绕过漏洞。攻击者可以通过操纵登录过程中的 HTTP 重定向头，绕过正常的身份验证机制，导致脚本继续执行，从而在无需凭证的情况下实现权限提升。这意味着未授权的攻击者可能获得对受
Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit th...
CVE-2026-41119
该漏洞存在于 Dell Live Optics Windows 和 Personal Edition 收集器中，属于证书验证不当。攻击者可以利用此漏洞绕过证书验证，实施中间人攻击或冒充合法服务器，从而拦截或篡改通信数据。由于无需身份验证，攻
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Basamak Information Technology Consulting and Organization Trade Ltd. Co. D...
CVE-2026-7498
CVE-2026-7498 是 Basamak Information Technology Consulting and Organization Trade Ltd. Co. 开发的 DernekWeb 产品中的一个存储型跨站脚本（XS
A vulnerability in Command-Line Client in P4 Server prior to the 2025.2 Patch 2, identified as CVE-2026-6902, has been fixed in P4 Server to address potential security risks.
CVE-2026-6902
CVE-2026-6902 是 P4 Server 中 Command-Line Client 的一个安全漏洞。该漏洞影响 P4 Server 2025.2 Patch 2 之前的所有版本。据 NVD 元数据描述，该漏洞已被修复，但未提供具
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows an attack...
CVE-2026-6347
该漏洞存在于 Mattermost Calls 插件中，影响 Mattermost 服务器版本 11.5.x <= 11.5.1、10.11.x <= 10.11.13 以及 11.4.x <= 11.4.3。漏洞源于插件在导出配置时未对敏
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet generation, w...
CVE-2026-6346
Mattermost 存在敏感配置信息泄露漏洞（CVE-2026-6346），影响版本包括 11.5.x <= 11.5.1、10.11.x <= 10.11.13 以及 11.4.x <= 11.4.3。漏洞源于在生成支持包（suppor
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to impersonate a u...
CVE-2026-6345
Mattermost 是一款开源的消息协作平台。该漏洞 (CVE-2026-6345) 影响 Mattermost 版本 11.5.x <= 11.5.1、10.11.x <= 10.11.13 以及 11.4.x <= 11.4.3。在这