2026-06-16 归档

今日共收录 1237 条安全情报,包含 420 个 CVE,450 篇安全通告,以及 98 篇研究论文。

← 返回归档列表
漏洞预警2026-06-15 发布INFO

MultiJuicer is used to run separate Juice Shop instances on a central kubernetes cluster without the need for local instances. In versions 8.0.0 through 10.0.0, the team join en...

CVE-2026-48518

MultiJuicer is used to run separate Juice Shop instances on a central kubernetes cluster without the need for local inst

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Cursor is a code editor built for programming with AI. In versions prior to 3.0.0, the Cursor Desktop could execute workspace-defined Claude hook commands from .claude/settings....

CVE-2026-48124

Cursor is a code editor built for programming with AI. In versions prior to 3.0.0, the Cursor Desktop could execute work

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and 44.0.2, when a filesystem preopen is given DirPerms::all() and FilePerms::READ without FilePerms...

CVE-2026-47261

Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and 44.0.2, when a filesystem preopen is gi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.

CVE-2026-45441

Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions.

CVE-2026-45437

Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.

CVE-2026-42775

Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.

CVE-2026-42752

Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions.

CVE-2026-42743

Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions.

CVE-2026-42688

Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.

CVE-2026-42687

Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.

CVE-2026-42686

Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.

CVE-2026-42668

Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions.

CVE-2026-42667

Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.

CVE-2026-42666

Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Broken Access Control in AI Product Search for WooCommerce &#8211; Motive Commerce Search <= 1.38.2 versions.

CVE-2026-42664

Unauthenticated Broken Access Control in AI Product Search for WooCommerce &#8211; Motive Commerce Search <= 1.38.2 vers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.

CVE-2026-42663

Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.

CVE-2026-42662

Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.

CVE-2026-42661

Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.

CVE-2026-42660

Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions.

CVE-2026-42659

Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions.

历史摘要 · 未重新核验 · NVD