Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in...
CVE-2026-58058
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (li
2026-06-28 归档
今日共收录 725 条安全情报，包含 41 个 CVE，384 篇安全通告，以及 89 篇研究论文。
← 返回归档列表nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a...
CVE-2026-58055
nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header an
RustDesk gates incoming control messages on per-capability flags rather than on the session's...
CVE-2026-58056
RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type
Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a...
CVE-2026-58057
Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparis
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey...
CVE-2026-58050
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses
7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted...
CVE-2026-58052
7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because it
MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when...
CVE-2026-58054
MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when creating or editing use
libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize...
CVE-2026-58051
libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsin
The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary...
CVE-2026-8095
The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions
The CONS_HISTORY ioctl handler did not adequately validate the requested history size. A large...
CVE-2026-49416
The CONS_HISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay,...
CVE-2026-11783
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPr
The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-13295
The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via panels_data Paramet
The Spexo theme for WordPress is vulnerable to unauthorized access due to a missing capability...
CVE-2026-12471
The Spexo theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the activate_plu
The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable...
CVE-2026-12399
The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Sc
The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to...
CVE-2026-3462
The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login...
CVE-2026-9242
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable...
CVE-2026-9233
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass
The Surbma | Infusionsoft Shortcode plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-11597
The Surbma | Infusionsoft Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'infusions
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay,...
CVE-2026-11987
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPr