今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-76634
WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows a
CVE-2026-76633
WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authentica
CVE-2026-76632
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-70383
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information Sys
CVE-2026-64972
ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double
CVE-2026-64971
ATutor is vulnerable to Reflected XSS in restore functionality. An attacker can provide a specially crafted URL that, wh
CVE-2026-64970
ATutor is vulnerable to Stored Cross Site Scripting in registration functionality. An attacker can register a new accou
CVE-2026-64969
ATutor is vulnerable to Insecure Direct Object Reference (IDOR) attack in profile picture related endpoints. Any authent
CVE-2026-64968
ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenticated administrator can make t
CVE-2026-64967
A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access
CVE-2026-64966
ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor priv
CVE-2026-64965
ATutor is vulnerable to Missing Authorization Check on Test and Question Import endpoints. A low-privileged authenticat
CVE-2026-64964
ATutor generates predictable email confirmation tokens due to the use of insufficiently random values in the account con
CVE-2026-64963
A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when
CVE-2026-64962
ATutor is vulnerable to Cross-Site Request Forgery (CSRF) in profile update functionality. An attacker can craft a malic
CVE-2026-64961
ATutor is vulnerable to authentication bypass . Although a token validation check is present in the auto-login functiona
CVE-2026-64960
ATutor Gameme module allows users to upload files of any type and extension without restriction. Due to improper handlin
CVE-2026-7485
Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allo
CVE-2026-77118
A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the
CVE-2026-76989
A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts