2026-06-17 归档

今日共收录 1195 条安全情报，包含 310 个 CVE，456 篇安全通告，以及 103 篇研究论文。

漏洞预警2026-06-16 发布INFO

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input vali...

CVE-2026-10829

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earli

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-06-16 发布INFO

A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior. This ...

CVE-2026-10828

A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPor

历史摘要 · 未重新核验 · NVD

#cve #cwe-134

漏洞预警2026-06-16 发布INFO

The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 12.6.8. This is due to missing authorization checks on the...

CVE-2026-8442

The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-16 发布INFO

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including,...

CVE-2026-8176

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Esca

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-06-16 发布INFO

Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Eth...

CVE-2026-5416

Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exp

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-16 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.

CVE-2026-54198

Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-06-16 发布INFO

Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions.

CVE-2026-54197

Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-201

漏洞预警2026-06-16 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Pods <= 3.3.8 versions.

CVE-2026-54191

Unauthenticated Cross Site Scripting (XSS) in Pods <= 3.3.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-06-16 发布INFO

Unauthenticated Broken Access Control in Envira Photo Gallery <= 1.12.5 versions.

CVE-2026-54190

Unauthenticated Broken Access Control in Envira Photo Gallery <= 1.12.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-16 发布INFO

Unauthenticated Broken Access Control in SEO Plugin by Squirrly SEO <= 12.4.16 versions.

CVE-2026-52714

Unauthenticated Broken Access Control in SEO Plugin by Squirrly SEO <= 12.4.16 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-16 发布INFO

Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.

CVE-2026-52712

Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-16 发布INFO

Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions.

CVE-2026-52711

Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-16 发布INFO

Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Metro Magazine: fr...

CVE-2026-40809

Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Contro

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-16 发布INFO

Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions.

CVE-2026-39581

Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-16 发布INFO

Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions.

CVE-2026-39490

Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-16 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions.

CVE-2026-39437

Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-06-16 发布INFO

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can sen...

CVE-2026-10825

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based

历史摘要 · 未重新核验 · NVD

#cve #cwe-1287

漏洞预警2026-06-16 发布INFO

Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.12 versions.

CVE-2025-68045

Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.12 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-06-16 发布INFO

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs[]' parameter of the wpfb_find_reviews AJAX action in versions up to, and includi...

CVE-2026-8444

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs[]' parameter of the wpf

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-06-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range fo...

CVE-2026-46331

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page ca

历史摘要 · 未重新核验 · NVD

#cve