On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a...
CVE-2026-34123
On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensit
2026-06-06 归档
今日共收录 1443 条安全情报，包含 665 个 CVE，387 篇安全通告，以及 120 篇研究论文。
← 返回归档列表The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to...
CVE-2025-12656
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory de
A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared...
CVE-2026-11424
A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Ser
The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to,...
CVE-2026-7523
The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. T
A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers...
CVE-2026-6240
A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficie
An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2,...
CVE-2026-6241
An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled
An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS...
CVE-2026-6242
An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper han
The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote...
CVE-2026-7654
The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in version
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise...
CVE-2026-11429
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. Th
A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers...
CVE-2026-6239
A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device
Bugsink: Project scoping missing in sourcemap and debug-file lookup
CVE-2026-47728
### Summary Bugsink before 2.2.0 resolved sourcemaps and debug files by debug ID without scoping that lookup to the pro
Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection...
CVE-2026-11422
Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection vulnerability in the WaveDrom ren
Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack...
CVE-2026-36785
Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the page parameter
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...
CVE-2026-5415
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for Wor
Twig: Possible sandbox bypass when using a source policy
CVE-2026-24425
# Description When using the sandbox with a `SourcePolicyInterface`, Twig does not always apply the sandbox restriction
Shopper: Missing authorization on Product admin Livewire sub-form components
CVE-2026-47742
## Impact Sub-form Livewire components used in the product editor (`Edit`, `Inventory`, `Seo`, `Shipping`, `Files`) had
Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(),...
CVE-2026-49493
Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block
Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown...
CVE-2026-50733
Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown content with eval(), a
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown...
CVE-2026-11344
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file n
An issue in the cluster-admin:backup-datastore component of Controller v12.0.5 allows attackers...
CVE-2026-36500
An issue in the cluster-admin:backup-datastore component of Controller v12.0.5 allows attackers to execute a directory t