Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-9082
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core
2026-05-21 归档
今日共收录 1079 条安全情报，包含 251 个 CVE，425 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Heap buffer overflow in WebRTC in Google Chrome on prior to 148.0.7778.179 allowed a remote...
CVE-2026-9119
Heap buffer overflow in WebRTC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrar
Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a...
CVE-2026-9117
Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a remote attacker who had comp
Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote...
CVE-2026-9113
Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to perform an out of
Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote...
CVE-2026-9111
Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrar
A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to...
CVE-2026-9102
A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitiza
NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A...
CVE-2026-24188
NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of t
NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of...
CVE-2026-24216
NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A succes
NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of...
CVE-2026-24218
NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes id
NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal...
CVE-2026-24217
NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious
ArcGIS Server contains an improper authentication vulnerability in an undocumented administrative...
CVE-2026-2812
ArcGIS Server contains an improper authentication vulnerability in an undocumented administrative endpoint. An unauthent
The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-7613
The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0]
InfoScale VIOM 9.1.3 allows XSS.
CVE-2026-44924
InfoScale VIOM 9.1.3 allows XSS.
Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not...
CVE-2026-9101
Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering she
Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote...
CVE-2026-30691
Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitra
The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database...
CVE-2026-9100
The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation.
In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin'...
CVE-2026-20238
In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could a
InfoScale CmdServer before 7.4.2 mishandles access control.
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control.
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.
CVE-2026-44923
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit...
CVE-2026-8488
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessi