今日共收录 1301 条安全情报，包含 465 个 CVE，462 篇安全通告，以及 91 篇研究论文。
← 返回归档列表CVE-2026-32819
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat
CVE-2026-32806
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat
CVE-2026-16312
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-6793
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bifra Engineering
CVE-2026-63429
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no
CVE-2026-63428
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `completeSubmission` accepts a `hiddenFields: [{id,
CVE-2026-63102
rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitr
CVE-2026-51026
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a
CVE-2026-48824
Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for GHSA-fpxj-m5q8-fphw (CVE-2
CVE-2026-46671
Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciou
CVE-2026-46428
lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug
CVE-2026-45797
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the `/api/upload` endpoint allows unauthenticated f
CVE-2026-45713
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.M
CVE-2026-45712
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?dat
CVE-2026-45711
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http sub-command
CVE-2026-45709
Mailpit is an email testing tool and API for developers. The fix for GHSA-6jxm-fv7w-rw5j (CVE-2026-23845, "Server-Side R
CVE-2026-32822
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat
CVE-2026-32807
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat
CVE-2026-28220
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, i
CVE-2026-27823
A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an auth