今日共收录 1220 条安全情报，包含 330 个 CVE，503 篇安全通告，以及 110 篇研究论文。
← 返回归档列表CVE-2026-11770
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the Cle
CVE-2026-10079
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, AC
CVE-2026-65313
A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-c
CVE-2026-65311
The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoi
CVE-2026-65310
ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configu
CVE-2026-65309
ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible form
CVE-2026-18218
A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attemp
CVE-2026-18217
A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution
CVE-2026-18211
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is respo
CVE-2026-18209
A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flow
CVE-2026-18208
A flaw was found in the OIDC token introspection endpoint of the keycloak-services component. Keycloak is an open-source
CVE-2026-18206
A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services.
CVE-2026-18203
A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a gr
CVE-2026-16105
A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoin
CVE-2026-8155
The BuddyPress WordPress plugin before 14.5.0 does not properly enforce authorization on its private messaging endpoints
CVE-2026-16236
The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5
CVE-2026-15381
The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a S
CVE-2026-15258
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-fe
CVE-2026-15209
The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a
CVE-2026-15048
The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, allowin