今日共收录 1122 条安全情报，包含 327 个 CVE，410 篇安全通告，以及 104 篇研究论文。
← 返回归档列表CVE-2026-21552
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional
CVE-2026-21551
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional
CVE-2026-21550
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional
CVE-2026-21549
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional
CVE-2026-21548
In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System exec
CVE-2026-18593
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/te
CVE-2026-18592
A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of
CVE-2026-18591
A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by this vulnerability i
CVE-2026-18590
A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function set_sys_adm of the file ad
CVE-2026-12259
In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to
CVE-2026-9593
A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the
CVE-2026-4793
An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or wr
CVE-2026-18587
A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component
CVE-2026-16572
The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a
CVE-2026-16565
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify produc
CVE-2026-16564
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order
CVE-2026-16563
The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when return
CVE-2026-16539
The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a S
CVE-2026-16297
The Clearfy Cache WordPress plugin before 2.4.3 does not restrict the classes allowed when unserializing settings-impor
CVE-2026-16289
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending me