今日共收录 1422 条安全情报，包含 546 个 CVE，469 篇安全通告，以及 113 篇研究论文。
← 返回归档列表CVE-2025-13146
The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in a
CVE-2026-16473
A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame decoder allows a crafted aud
CVE-2026-14551
The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are v
CVE-2026-63264
The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller.
CVE-2026-2406
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industr
CVE-2026-15787
The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu
CVE-2026-63048
The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.
CVE-2026-63047
The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download
CVE-2026-45820
fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with
CVE-2026-3821
Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attack
CVE-2026-12987
The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using No-Use
CVE-2026-12968
The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthent
CVE-2026-15802
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation
CVE-2026-56844
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate
CVE-2026-16492
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of
CVE-2026-16490
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of t
CVE-2026-63263
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansio
CVE-2026-63262
Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied
CVE-2026-16489
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib
CVE-2026-16488
A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Po