2026-06-07 归档

今日共收录 735 条安全情报,包含 30 个 CVE,368 篇安全通告,以及 77 篇研究论文。

← 返回归档列表
安全公告2026-06-06 发布INFO

A vulnerability was determined in theonedev onedev up to 15.0.5. This affects an unknown part of...

CVE-2026-11440

A vulnerability was determined in theonedev onedev up to 15.0.5. This affects an unknown part of the file /repositories/

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of...

CVE-2026-11436

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of...

CVE-2026-11434

A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

Protocol::HTTP2 versions through 1.12 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's...

CVE-2026-10725

Protocol::HTTP2 versions through 1.12 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some...

CVE-2026-11408

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

A weakness has been identified in Jinher OA C6. The affected element is an unknown function of...

CVE-2026-11412

A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.M

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu...

CVE-2025-2412

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu allows Authentication Bypass

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...

CVE-2025-0610

Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery. This issue affec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to...

CVE-2026-8991

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Script

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress...

CVE-2026-7665

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Informa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object...

CVE-2026-8611

The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is...

CVE-2026-8978

The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Inje

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is...

CVE-2026-9016

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Ne

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross...

CVE-2026-9280

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is...

CVE-2026-8502

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up...

CVE-2026-9197

The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all...

CVE-2026-7537

The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and includi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account...

CVE-2026-9851

The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin...

CVE-2026-9594

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnera

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-06 发布INFO

The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more...

CVE-2026-7796

The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more plugin for WordPress i

历史摘要 · 未重新核验 · GitHub Advisory