A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of...
CVE-2026-78141
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCo
2026-08-24 归档
今日共收录 798 条安全情报，包含 82 个 CVE，390 篇安全通告，以及 72 篇研究论文。
← 返回归档列表A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update...
CVE-2026-78140
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/ja
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float. quote_float()...
CVE-2026-78183
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float. quote_float() allocates the length of th
Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded...
CVE-2026-75922
Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unenco
justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS)...
CVE-2026-8630
justhtml before 1.12.0 (versions and . When a DOM tree is processed by sanitize_dom() using a custom policy that keeps
justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to...
CVE-2026-9769
justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During Ju
justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer...
CVE-2026-74793
justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler
justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in...
CVE-2026-77088
justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code s
justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown()...
CVE-2026-5389
justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializ
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector...
CVE-2026-4671
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkificatio
justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and...
CVE-2026-6827
justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling.
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected...
CVE-2026-78115
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts...
CVE-2026-78112
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19...
CVE-2026-10053
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 1
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function...
CVE-2026-78063
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the
Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into...
CVE-2026-77115
Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without
The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during...
CVE-2026-13598
The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, al
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some...
CVE-2026-78060
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of t
The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to...
CVE-2026-77003
The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being c
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one...
CVE-2026-14853
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, a