今日共收录 2277 条安全情报，包含 1464 个 CVE，419 篇安全通告，以及 96 篇研究论文。
← 返回归档列表CVE-2026-44509
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43619. Reason: This candidate is a
CVE-2026-44508
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43618. Reason: This candidate is a
CVE-2026-44507
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43617. Reason: This candidate is a
CVE-2026-13381
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/fil
CVE-2026-13380
VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthent
CVE-2026-53593
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylis
CVE-2026-53592
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A Prototype Pollution condition in th
CVE-2026-53591
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.223, an unauthen
CVE-2026-44229
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 and 6.0.0 and above, prior to bo
CVE-2026-16337
Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-
CVE-2026-15788
BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory ju
CVE-2026-64194
Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::Doma
CVE-2026-63769
Huginn through 2022.08.18 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport
CVE-2026-63731
HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to dir
CVE-2026-62414
The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.
CVE-2026-61901
The Joomla extension Hikashop is vulnerable to an open redirect.
CVE-2026-61900
The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.
CVE-2026-61425
The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.
CVE-2026-61424
The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.
CVE-2026-60034
The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff,