今日共收录 1730 条安全情报，包含 831 个 CVE，478 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2017-20248
Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbi
CVE-2017-20247
WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to
CVE-2017-20246
KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to r
CVE-2017-20245
Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to
CVE-2017-20244
Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to
CVE-2017-20243
WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows un
CVE-2016-20065
Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers
CVE-2016-20064
WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary f
CVE-2016-20063
Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitra
CVE-2016-20062
Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to
CVE-2026-49742
Backend users with file download permissions were able to download files from the fallback storage of the file abstracti
CVE-2026-49741
Backend users with write access to the form_definition database table were able to directly create, update, or delete fo
CVE-2026-49740
TYPO3's cache frontend (VariableFrontend) and persistent key-value store (Registry) deserialized PHP payloads without in
CVE-2026-49738
The path allowance check in GeneralUtility::isAllowedAbsPath() performed a plain string prefix comparison without requir
CVE-2026-47352
Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission
CVE-2026-47351
Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission ch
CVE-2026-47350
Backend users were able to move records to a different page without having edit permissions on the source page. This iss
CVE-2026-47349
Backend users with access to the Recycler module were able to restore soft-deleted records on pages or for tables they w
CVE-2026-47348
Editors with access to create or modify page content were able to include HTML markup in page titles that were stored in
CVE-2026-47347
Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks