今日共收录 997 条安全情报，包含 210 个 CVE，375 篇安全通告，以及 115 篇研究论文。
← 返回归档列表CVE-2026-54224
UBB.threads is vulnerable to Denial of Service (DoS). By sending multiple concurrent requests to view any user profile o
CVE-2026-54223
UBB.threads is vulnerable to Path traversal, allowing attackers with privilege to edit templates to read and write any f
CVE-2026-54222
UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to inte
CVE-2026-54221
UBB.threads is vulnerable to Reflected XSS. The application improperly handles user input in certain requests, enabling
CVE-2026-54220
uBB.threads is vulnerable to a Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms. This allows an
CVE-2026-54219
UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly saniti
CVE-2026-50141
Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI's
CVE-2026-44942
A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series
CVE-2026-42490
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi
CVE-2026-42489
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi
CVE-2026-42488
Some shadow paging errors paths will switch the page-tables without updating the currently running vCPU reference. This
CVE-2026-42487
HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the de
CVE-2026-40457
A Reflected Cross-Site Scripting (XSS) vulnerability exists in LMS (LAN Management System) before commit 9c5651b in the
CVE-2026-40456
An OS Command Injection vulnerability exists in LMS (LAN Management System) before commit 9fcb4de due to an IP address p
CVE-2026-40455
An SQL Injection vulnerability exists in LMS (LAN Management System) before commit 4cb30a7 within the "tarifflist.php" m
CVE-2026-12539
Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-appl
CVE-2026-12527
A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V3
CVE-2026-12039
Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network
CVE-2026-11958
Local privilege escalation by loading DLLs from a shared temporary directory in ANSSI’s DFIR-ORC, versions 10.2.7 and pr
CVE-2026-11719
An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement