今日共收录 1581 条安全情报，包含 810 个 CVE，383 篇安全通告，以及 109 篇研究论文。
← 返回归档列表CVE-2026-42729
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive Prop
CVE-2026-42728
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Cont
CVE-2026-42726
Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Explo
CVE-2026-42725
Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout
CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabl
CVE-2026-2288
The myLinksDump plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_title' parameter in all
CVE-2026-2280
The rexCrawler plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up t
CVE-2025-0898
The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and
CVE-2026-8054
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints
CVE-2026-48968
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slid
CVE-2026-48877
Insertion of Sensitive Information Into Sent Data vulnerability in Tom GenerateBlocks allows Retrieve Embedded Sensitive
CVE-2026-40852
A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. T
CVE-2026-40851
A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to
CVE-2026-40850
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData func
CVE-2026-40849
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile vi
CVE-2026-40848
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to impr
CVE-2026-40847
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due
CVE-2026-40846
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to i
CVE-2026-40845
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuratio
CVE-2026-40844
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due t