今日共收录 1730 条安全情报，包含 831 个 CVE，478 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-47346
Backend users with file write permissions were able to upload form definition files with mixed-case extensions (e.g., .F
CVE-2026-47343
Non-privileged backend users with file mount access were able to perform write operations (move, delete, rename) on fold
CVE-2026-11607
Backend users with access to the Form Framework were able to use files not ending in .form.yaml as form definitions, whi
CVE-2026-52902
A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize
CVE-2026-4058
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordP
CVE-2026-46749
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a pas
CVE-2026-46748
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected system includes a bina
CVE-2026-46747
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not p
CVE-2026-46746
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly s
CVE-2026-41031
A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an
CVE-2026-24349
A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Run
CVE-2026-10731
SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/u
CVE-2025-40808
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions),
CVE-2026-8677
The Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages plugin for WordPress is vulnerable to Stored
CVE-2026-8599
The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable
CVE-2026-8365
The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksy_
CVE-2026-7542
The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to and inclu
CVE-2026-6899
Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in th
CVE-2026-49818
The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a c
CVE-2026-46315
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying i