今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-48413
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged
CVE-2026-48412
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An att
CVE-2026-48411
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A
CVE-2026-48410
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t
CVE-2026-48409
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t
CVE-2026-48408
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t
CVE-2026-48407
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t
CVE-2026-48406
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t
CVE-2026-48405
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t
CVE-2026-48404
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t
CVE-2026-48397
Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code e
CVE-2026-47940
Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe
CVE-2026-0465
A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kern
CVE-2025-54512
A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to e
CVE-2025-0046
Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrar
CVE-2022-50997
Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint th
CVE-2016-20097
Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthe
CVE-2026-73089
Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to
CVE-2026-73088
Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to
CVE-2026-73087
Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal