今日共收录 1589 条安全情报，包含 784 个 CVE，406 篇安全通告，以及 115 篇研究论文。
← 返回归档列表CVE-2026-59507
CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Impr
CVE-2026-59506
CWE-306: Missing Authentication for Critical Function
CVE-2026-59504
CWE-602: Client-Side Enforcement of Server-Side Security
CVE-2026-59503
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to
CVE-2026-59500
CWE-287: Improper Authentication
CVE-2026-15413
The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-
CVE-2026-14182
The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-veri
CVE-2026-49819
UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-esc
CVE-2026-16770
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document
CVE-2026-71193
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constr
CVE-2026-49481
UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap’s devi
CVE-2026-73519
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a
CVE-2026-73501
kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load() in openapi3filter/val
CVE-2026-71471
A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically wit
CVE-2026-18749
The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coor
CVE-2024-27253
IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform
CVE-2026-66898
A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restor
CVE-2026-19001
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an
CVE-2026-72508
A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This
CVE-2026-63300
An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an auth