Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements...
CVE-2026-72786
Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements/save action that allows
2026-08-13 归档
今日共收录 1881 条安全情报，包含 959 个 CVE，493 篇安全通告，以及 113 篇研究论文。
← 返回归档列表GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1...
CVE-2026-6821
GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1 before 19.1.4, and 19.2
SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the /api/system...
CVE-2026-72793
SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the /api/system/getConf endpoint, allowing
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an...
CVE-2026-59914
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoo
When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA...
CVE-2026-18679
When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane co
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...
CVE-2026-17417
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper n
IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.
CVE-2026-13361
IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper...
CVE-2026-59916
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerab
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper...
CVE-2026-59917
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19...
CVE-2026-15217
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 1
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...
CVE-2026-18099
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to imprope
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive...
CVE-2026-18150
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race c
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send...
CVE-2026-17111
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statement
GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1...
CVE-2026-4879
GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1 before 19.1.4, and 19.2
Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and...
CVE-2026-49466
Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to s
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary...
CVE-2026-18148
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navigator log
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19...
CVE-2026-18433
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that u
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an...
CVE-2026-46731
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoo
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19...
CVE-2026-15216
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 1
MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
CVE-2026-55071
## Stata Command Injection via Unsanitized `package` in `ado_package_install` ### Summary The `ado_package_install` MC