今日共收录 1050 条安全情报，包含 282 个 CVE，378 篇安全通告，以及 103 篇研究论文。
← 返回归档列表CVE-2026-49471
Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2,
CVE-2026-46700
Actual is a local-first personal finance tool. Prior to 26.6.0, the GET /secret/:name endpoint in @actual-app/sync-serve
CVE-2026-46672
Actual is a local-first personal finance app. Prior to 26.6.0, @actual-app/cli ships a hand-rolled CSV serializer in pac
CVE-2026-44454
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7 and 2.30
CVE-2026-58468
NocoBase through 2.1.20 contains a server-side request forgery vulnerability in the serverRequest wrapper that allows au
CVE-2026-44877
An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960
CVE-2026-7017
HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server
CVE-2026-59708
The GET /api/v1/public/:accessId/portfolio endpoint in ghostfolio accepts private access IDs without validating granteeU
CVE-2026-55435
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and pr
CVE-2026-48958
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
CVE-2026-48957
An improper access check allows unauthorized users to access com_privacy datasets.
CVE-2026-48956
An improper access check allows users to display a list of modules in the frontend.
CVE-2026-48955
An improper access check allows unauthorized users to access workflow stage and transition information.
CVE-2026-48954
Improper validation leads to a generic XSS vector in the language override feature.
CVE-2026-48953
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
CVE-2026-48952
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVE-2026-48951
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVE-2026-48950
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVE-2026-48949
Lack of validation leads to an XSS vulnerability in the MFA management views.
CVE-2026-48948
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.