【账号中心】关于《腾讯云账号注销协议》更新的说明
【账号中心】关于《腾讯云账号注销协议》更新的说明
2026-07-05 归档
今日共收录 754 条安全情报，包含 65 个 CVE，375 篇安全通告，以及 61 篇研究论文。
← 返回归档列表关于短信产品增值税发票税率调整的公告
关于短信产品增值税发票税率调整的公告
A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users.php of the compone...
CVE-2026-14695
该漏洞存在于 SourceCodester Multi-Vendor Online Grocery Management System 1.0 的 Registration Handler 组件中，具体位于 classes/Users.ph
A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancel_order of the file classes/Maste...
CVE-2026-14694
CVE-2026-14694 是一个存在于 SourceCodester Multi-Vendor Online Grocery Management System 1.0 中的 SQL 注入漏洞。该漏洞位于 classes/Master.
A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the file classes/Master...
CVE-2026-14693
SourceCodester Multi-Vendor Online Grocery Management System 1.0 中存在一个不当授权漏洞。该漏洞位于文件 classes/Master.php 中的 cancel_order
A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save_shop_type of the file classes/Master.php o...
CVE-2026-14692
SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26 中发现一个 SQL 注入漏洞。该漏洞位于 classes/Master.php 文件的 save
A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function update_settings_info of the file classe...
CVE-2026-14691
该漏洞存在于 SourceCodester Multi-Vendor Online Grocery Management System 1.0 中的 Setting Handler 组件，具体位于文件 classes/SystemSetti
A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This mani...
CVE-2026-14690
SourceCodester Multi-Vendor Online Grocery Management System 1.0 存在一个授权不当漏洞。该漏洞位于文件 classes/Users.php 中的 save_users 函数，攻
Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerand...
CVE-2026-14570
CVE-2026-14570 影响 Perl 的 Crypt::DSA 模块版本低于 1.22。该模块在生成 DSA 签名时，使用了一个有偏的随机数生成器（makerandom）来产生签名随机数（nonce）和私钥。该生成器强制将返回值的最
A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. The affected element is an unknown function of the file /admin/login.php. The manipulation of ...
CVE-2026-14688
该漏洞存在于 itsourcecode Online Hotel Management System 1.0 版本中，位于 /admin/login.php 文件的未知函数内。攻击者可以通过操纵 email 参数进行 SQL 注入攻击，远程
A vulnerability was determined in 666ghj BettaFish up to 1.2.1. Impacted is the function _deduplicate_results of the file InsightEngine/agent.py of the component InsightEngine s...
CVE-2026-14687
CVE-2026-14687 影响 666ghj BettaFish 版本 1.2.1 及之前版本。该漏洞位于 InsightEngine 组件的 agent.py 文件中的 _deduplicate_results 函数，用于搜索结果的去
A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.recordValue of the file src/main/java/org/HdrHistogram/Do...
CVE-2026-14686
该漏洞影响 HdrHistogram 库的 2.2.2 及之前版本。问题位于 `org.HdrHistogram.DoubleHistogram.recordValue` 方法中，属于范围检查（Range Check）组件。由于不正确的比较
A vulnerability has been found in HdrHistogram up to 2.2.2. This vulnerability affects the function recordValueWithCount of the file src/main/java/org/HdrHistogram/AbstractHisto...
CVE-2026-14685
该漏洞存在于 HdrHistogram 库（版本 up to 2.2.2）的 AbstractHistogram.java 文件中的 recordValueWithCount 函数。由于对参数 Count 的操作存在状态问题，攻击者通过本地
A flaw has been found in HdrHistogram up to 2.2.2. This affects the function org.HdrHistogram.AbstractHistogram.decodeFromByteBuffer of the file src/main/java/org/HdrHistogram/A...
CVE-2026-14684
CVE-2026-14684 是一个影响 HdrHistogram 库（Java实现）的拒绝服务漏洞。该库广泛用于高性能时间序列数据记录，常见于监控系统、性能分析工具等场景。漏洞位于 AbstractHistogram.decodeFrom
A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file sr...
CVE-2026-14683
CVE-2026-14683 是 HdrHistogram 库（版本 2.2.2 及之前）中的一个漏洞。该漏洞位于 AbstractHistogram.java 文件的 decodeFromCompressedByteBuffer 函数中，
A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument tx...
CVE-2026-14660
CVE-2026-14660 是 code-projects 开发的 Online Job Portal 1.0 中的一个 SQL 注入漏洞。该漏洞位于 login.php 文件中，攻击者可以通过操纵参数 txtUser 或 txtPass
A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipulation of the argu...
CVE-2026-14659
CVE-2026-14659 是 itsourcecode Hospital Management System 1.0 中 /patientappointment.php 文件的一个 SQL 注入漏洞。攻击者通过该文件的 patiente
A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The manipulation of th...
CVE-2026-14658
该漏洞存在于 code-projects Assessment Management 1.0 的 /lecturer/marking-scheme.php 文件中。攻击者可以通过向 smarksrange[] 参数注入恶意 SQL 代码，实
A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Q...
CVE-2026-14657
CVE-2026-14657 是 code-projects Assessment Management 1.0 中的一个 SQL 注入漏洞。漏洞位于 /lecturer/marking-scheme.php 文件的数据库查询处理器中，攻击
A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the a...
CVE-2026-14656
CVE-2026-14656 是一个存在于 code-projects Assessment Management 1.0 中的跨站脚本 (XSS) 漏洞。该漏洞影响 /admin/remove-user.php 文件，攻击者可以通过操纵