Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-5783
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Sof
2026-05-21 归档
今日共收录 1079 条安全情报，包含 251 个 CVE，425 篇安全通告，以及 115 篇研究论文。
← 返回归档列表A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could...
CVE-2026-20199
A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, re
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through...
CVE-2025-32750
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerabilit
Buffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute...
CVE-2026-39047
Buffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute arbitrary code via the RAW Prin
Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows...
CVE-2026-8487
Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Da
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit...
CVE-2026-8486
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Floodin
Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows...
CVE-2026-8485
Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This i
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code...
CVE-2026-45584
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
Multiple flaws have been identified in `named` related to the handling of DNS messages whose...
CVE-2026-5946
Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`
Undefined behavior may result due to a race condition leading to a use-after-free violation. If...
CVE-2026-5947
Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incomi
MediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability
CVE-2026-22554
MediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability
The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability. Under certain...
CVE-2026-21836
The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability. Under certain circumstances, documen
An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad...
CVE-2026-5950
An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling
Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop...
CVE-2026-45443
Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Explo
Microsoft Defender Denial of Service Vulnerability
CVE-2026-45498
Microsoft Defender Denial of Service Vulnerability
Improper link resolution before file access ('link following') in Azure Portal Windows Admin...
CVE-2026-42834
Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized
Improper link resolution before file access ('link following') in Microsoft Defender allows an...
CVE-2026-41091
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to el
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-42383
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooComme
A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue...
CVE-2026-3593
A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.
Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service
CVE-2026-8468
### Summary An Allocation of Resources Without Limits or Throttling vulnerability in `Plug.Conn.read_part_headers/2` al