今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2025-11850
When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary us
CVE-2024-8995
Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This a
CVE-2024-6832
The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not mainta
CVE-2024-10302
The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allo
CVE-2023-7355
Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-7354
Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-7353
Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2026-19007
A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. This vulnerability affects the function isApprovedEle
CVE-2026-19005
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file s
CVE-2026-18967
A flaw was found in the SAML broker component of Keycloak, an identity and access management solution. When configured a
CVE-2026-18510
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross
CVE-2026-18400
The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Store
CVE-2026-18395
The Child Pages Card WordPress plugin before 1.09 does not sanitise and escape some of its shortcode attributes before o
CVE-2026-18050
The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves tem
CVE-2026-16954
The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admi
CVE-2026-16734
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.2 does not verify that the caller owns the Stripe p
CVE-2026-16537
The Slick Slider WordPress plugin before 0.5.3 does not sanitize and escape a shortcode attribute value before outputtin
CVE-2026-16290
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks before returning a group's member
CVE-2026-16268
The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetchi
CVE-2026-16065
The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV fil