The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due...
CVE-2026-10737
The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability
2026-06-04 归档
今日共收录 1001 条安全情报，包含 200 个 CVE，398 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-2596
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
OpenStack Ironic through 35.0.x allows Boot Script Injection.
CVE-2026-46447
OpenStack Ironic through 35.0.x allows Boot Script Injection.
A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability...
CVE-2026-10775
A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_h
A vulnerability was identified in ealpha072 Student-Management-System up to...
CVE-2026-10777
A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Af
Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric...
CVE-2026-8722
Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked fo
A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate...
CVE-2026-10771
A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-
Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an...
CVE-2026-22055
Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low p
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function...
CVE-2026-10783
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the co
Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an...
CVE-2026-22054
Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with l
AIOHTTP is vulnerable to cross-origin redirect with per-request cookies
CVE-2026-47265
### Summary Cookies set with the `cookies` parameter on requests are sent after following a cross-origin redirect. ###
Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that...
CVE-2026-8878
Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated
Local privilege escalation due to EXE hijacking vulnerability. The following products are...
CVE-2026-44609
Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock D
A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils...
CVE-2026-10766
A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_datafr
Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in...
CVE-2026-8876
Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These key
Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a...
CVE-2026-8881
Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES
Local privilege escalation due to excessive permissions assigned to child processes. The...
CVE-2026-42061
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected
Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content...
CVE-2026-8879
Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scri
libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE...
CVE-2026-26824
libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory al
Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server...
CVE-2026-8888
Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as J