FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer...
CVE-2026-67294
FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client-si
2026-08-02 归档
今日共收录 946 条安全情报，包含 146 个 CVE，466 篇安全通告，以及 75 篇研究论文。
← 返回归档列表FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in...
CVE-2026-67291
FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fragments
FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264...
CVE-2026-66401
FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fail
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache...
CVE-2026-67288
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi...
CVE-2025-71402
better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-ou
Rejected reason: ** DUPLICATE ** This CVE Record has been rejected by the Zephyr Project CNA. CVE...
CVE-2026-10772
Rejected reason: ** DUPLICATE ** This CVE Record has been rejected by the Zephyr Project CNA. CVE-2026-10772 was assigne
better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation...
CVE-2025-71403
better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute
The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to...
CVE-2026-18059
The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Sensitive Information Exp
The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products...
CVE-2026-17580
The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elem
The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to...
CVE-2026-16144
The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all
The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable...
CVE-2026-18435
The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site S
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is...
CVE-2026-17605
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Incl
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin...
CVE-2026-17571
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulne
The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site...
CVE-2026-18344
The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' par
The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...
CVE-2026-16684
The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact
The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to...
CVE-2026-6453
The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.1.30. Thi
The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is...
CVE-2026-16614
The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is vulnerable to generic SQL
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon'...
CVE-2026-16685
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in
The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to...
CVE-2026-16635
The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0
The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the...
CVE-2026-17555
The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the export_data parameter in vers