今日共收录 1122 条安全情报，包含 327 个 CVE，410 篇安全通告，以及 104 篇研究论文。
← 返回归档列表CVE-2026-59912
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnera
CVE-2026-38446
A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread e
CVE-2026-38444
osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header display name. The value is
CVE-2025-15631
A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing al
CVE-2025-15630
A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with t
CVE-2025-15629
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communicati
CVE-2025-15628
Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between contr
CVE-2025-15544
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials assoc
CVE-2026-61524
WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature th
CVE-2026-61523
WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated
CVE-2026-40717
Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnera
CVE-2025-9291
A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certif
CVE-2026-69153
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract
CVE-2026-69152
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3
CVE-2026-69151
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-69149
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-68945
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-68930
Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for reci
CVE-2026-68869
Rejected reason: This CVE ID was assigned in error. Upon further review, the reported issue does not represent a securit
CVE-2026-67612
OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that al