Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.
CVE-2026-78259
Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.
2026-08-25 归档
今日共收录 1135 条安全情报，包含 329 个 CVE，404 篇安全通告，以及 111 篇研究论文。
← 返回归档列表Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
CVE-2026-78266
Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions.
CVE-2026-32556
Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions.
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice...
CVE-2026-32560
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versio
Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.
CVE-2026-32561
Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.
CVE-2026-78263
Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.
Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.
CVE-2026-27364
Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds...
CVE-2026-7455
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link().
CVE-2026-75464
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link().
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip...
CVE-2026-52492
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory...
CVE-2026-19568
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A mal
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute...
CVE-2026-52490
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the proces
A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds...
CVE-2026-16783
A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A
A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot...
CVE-2022-30983
A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows rem
A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the...
CVE-2026-78430
A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall o
RansomLook contains multiple weaknesses in its authentication endpoint that allow an...
CVE-2026-78551
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled...
CVE-2026-16781
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerabilit
RansomLook created its Flask session-signing key without explicitly restricting the file...
CVE-2026-78553
RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key fil
Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an...
CVE-2026-77923
Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds...
CVE-2026-16782
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A m