The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-5293
The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js'
2026-05-20 归档
今日共收录 1110 条安全情报，包含 284 个 CVE，411 篇安全通告，以及 113 篇研究论文。
← 返回归档列表The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request...
CVE-2026-6400
The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions
The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored...
CVE-2026-6404
The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th
The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions...
CVE-2026-6401
The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.1.
The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions...
CVE-2026-6399
The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.
The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in...
CVE-2026-6452
The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i
Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system...
CVE-2026-43619
Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod,
The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is...
CVE-2026-3985
The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection v
Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in...
CVE-2026-43620
Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver
Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token...
CVE-2026-43618
Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit s
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's...
CVE-2026-43617
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access
Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as ...
CVE-2026-45585
Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View...
CVE-2026-8491
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Brows
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...
CVE-2026-6366
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allow
Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected....
CVE-2026-5090
Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected. The html_filter funct
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-6871
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Obfuscate a
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-6367
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core
Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with...
CVE-2026-8492
Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource L
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-6365
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue...
CVE-2026-8495
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.