今日共收录 1301 条安全情报，包含 465 个 CVE，462 篇安全通告，以及 91 篇研究论文。
← 返回归档列表CVE-2026-63735
SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticat
CVE-2026-63734
SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML header parser that allows aut
CVE-2026-63733
SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMIS
CVE-2026-16254
A flaw was found in claircore's apk package scanner. Malformed package-database data in a container layer can cause an o
CVE-2026-16247
In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this proces
CVE-2026-16246
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows g
CVE-2026-15813
A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The int
CVE-2026-15588
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` a
CVE-2026-14448
An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_certifi
CVE-2026-2445
The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encod
CVE-2026-13577
Dancer2 versions through 2.1.0 for Perl generate insecure session ids when CSPRNG modules are unavailable. Dancer2::Cor
CVE-2026-9833
The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape
CVE-2026-8825
The Elementor Website Builder WordPress plugin before 4.1.4 does not properly check user permissions before returning p
CVE-2026-6656
Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The check_password method uses the bu
CVE-2026-13432
The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing a
CVE-2026-13156
The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action (it veri
CVE-2026-13142
The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or a wo
CVE-2026-12970
The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML attri
CVE-2026-12898
The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value be
CVE-2026-12724
The Kirki WordPress plugin before 6.0.12 does not sanitise or escape the email subject and body values supplied in a re