今日共收录 2403 条安全情报，包含 1575 个 CVE，408 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-74906
SiYuan before v3.7.4 contains an incorrect authorization vulnerability in eight publish-mode reader-facing endpoints tha
CVE-2026-74905
SiYuan before v3.7.4 contains a server-side request forgery (SSRF) vulnerability in the isPrivateIP function in kernel/u
CVE-2026-74904
SiYuan before v3.7.4 is missing authorization checks in 17 block metadata/content endpoints in kernel/api/block.go (incl
CVE-2026-74903
SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which
CVE-2026-74902
SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fails to esca
CVE-2026-5224
Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information Technologies Industry Trade I
CVE-2026-15585
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software Computer I
CVE-2026-75773
A vulnerability was found in karakeep-app karakeep up to 0.32.0. The affected element is the function authorize of the f
CVE-2026-19608
A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained a
CVE-2026-19447
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbis Informat
CVE-2024-14046
A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController
CVE-2026-18929
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The
CVE-2026-43971
Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggling via une
CVE-2024-14045
A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/
CVE-2026-34884
SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issu
CVE-2026-15371
Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and form
CVE-2026-75091
The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-
CVE-2026-75151
A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vu
CVE-2026-11801
The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and
CVE-2026-75093
A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from_raw_dt_al