A vulnerability was determined in JeecgBoot up to 3.9.1. The affected element is the function...
CVE-2026-9580
A vulnerability was determined in JeecgBoot up to 3.9.1. The affected element is the function LoginController.selectDepa
2026-05-27 归档
今日共收录 1142 条安全情报，包含 375 个 CVE，381 篇安全通告，以及 103 篇研究论文。
← 返回归档列表An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an...
CVE-2026-8676
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bo
A security flaw has been discovered in SourceCodester CET Automated Grading System with AI...
CVE-2026-9582
A security flaw has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. Thi
A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive...
CVE-2026-9583
A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This imp
A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown...
CVE-2026-9581
A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/co
PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality
CVE-2026-36239
PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality
Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing...
CVE-2025-14361
Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This...
CVE-2026-9575
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown
A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This...
CVE-2026-9574
A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code
A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This...
CVE-2026-9573
A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of t
Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly...
CVE-2026-27331
Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Contro
A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the...
CVE-2026-9572
A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample o
Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly...
CVE-2026-25444
Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Contr
Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce...
CVE-2026-25426
Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectl
Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly...
CVE-2026-24520
Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Secu
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with...
CVE-2026-4051
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to e
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 is vulnerable to an XML external...
CVE-2026-3603
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 is vulnerable to an XML external entity injection (XXE) att
XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests
CVE-2026-48048
### Impact XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient and with slightly modified parameter
XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin
CVE-2026-48047
### Impact A potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar extension in
Pterodactyl has a database resource limit bypass via race condition in Client API
CVE-2026-35202
### Summary The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database alloc