今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-5303
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to priv
CVE-2026-4757
A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege
CVE-2026-18348
Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst
CVE-2026-14549
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of
CVE-2026-14548
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of
CVE-2026-12052
The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in subsys/usb/device_next/class/usbd_cdc_ncm.
CVE-2026-12051
The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contains a NULL pointer der
CVE-2026-16974
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site
CVE-2026-11985
On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the "Floating point ABI" choice, which defaults to
CVE-2026-11893
The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drivers/bluetoo
CVE-2026-8917
Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a
CVE-2026-24330
A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a mali
CVE-2026-24329
A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload i
CVE-2026-19424
Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated rem
CVE-2026-66779
Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker co
CVE-2026-66773
A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data i
CVE-2026-66772
SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on cer
CVE-2026-66771
SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted applicatio
CVE-2026-66770
Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL
CVE-2026-66764
Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated user