2026-05-22 归档

今日共收录 1105 条安全情报,包含 281 个 CVE,422 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-05-21 发布INFO

Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HAPPY: from n/a through 1.0.10.

CVE-2026-39593

Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authenticated attackers to inject arbitrary JavaScript by passing ...

CVE-2026-48213

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authentic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automa...

CVE-2026-9089

The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a local atta...

CVE-2026-36189

Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Brute Force. This issu...

CVE-2026-1816

Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking. This issue affects Mobile App...

CVE-2026-1815

Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must...

CVE-2026-45208

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but...

CVE-2026-45207

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but...

CVE-2026-45206

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but...

CVE-2026-34930

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but...

CVE-2026-34929

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but...

CVE-2026-34928

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first ...

CVE-2026-34927

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious co...

CVE-2026-34926

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code exec...

CVE-2026-2740

Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus bef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected instal...

CVE-2025-71217

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. ...

CVE-2025-71216

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on aff...

CVE-2025-71215

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. ...

CVE-2025-71214

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must ...

CVE-2025-71213

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

历史摘要 · 未重新核验 · NVD