The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-7556
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment text in
2026-06-09 归档
今日共收录 1126 条安全情报，包含 321 个 CVE，413 篇安全通告，以及 105 篇研究论文。
← 返回归档列表The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-5714
The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘location_dir’ parame
Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP...
CVE-2026-44743
Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application l
The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-10862
The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all ver
A weakness has been identified in Dcat-Admin up to 2.2.3-beta. This impacts the function...
CVE-2026-11621
A weakness has been identified in Dcat-Admin up to 2.2.3-beta. This impacts the function editorMDUpload of the file /adm
SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending...
CVE-2026-44755
SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by
A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7...
CVE-2026-8795
A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version
Application server ABAP does not perform necessary authorization checks for an authenticated user...
CVE-2026-44751
Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker t
A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown...
CVE-2026-11620
A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsf
A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. The impacted element is an...
CVE-2026-11619
A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. The impacted element is an unknown function of the file
A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function...
CVE-2026-11618
A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file
Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a...
CVE-2026-11689
Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote...
CVE-2026-11699
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exp
Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote...
CVE-2026-11696
Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had comprom
Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed...
CVE-2026-11697
Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to p
Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote...
CVE-2026-11693
Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compr
Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker...
CVE-2026-11687
Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed a remote...
CVE-2026-11694
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised t
Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a...
CVE-2026-11695
Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to leak cro
Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote...
CVE-2026-11681
Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially explo