Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra...
CVE-2026-71503
Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration templa
2026-08-25 归档
今日共收录 1135 条安全情报，包含 329 个 CVE，404 篇安全通告，以及 111 篇研究论文。
← 返回归档列表Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA...
CVE-2026-13047
Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA should assign CVE IDs fo
In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute...
CVE-2025-26238
In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code.
3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation
CVE-2026-55477
# Summary An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on
django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)
CVE-2026-54625
### Summary The CMS page cache key ignores the request headers that plugins declare via `get_vary_cache_on()`. The heade
django CMS: Plugin move endpoint allows cyclic reparenting (DoS)
CVE-2026-54623
### Summary The `move_plugin` admin endpoint does not prevent a plugin from being reparented under itself or one of it
A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX...
CVE-2026-78475
A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin al
Baserow interpolates a user's display name into the rich-text mention markup without HTML...
CVE-2026-76837
Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/acco
An unauthenticated OS command injection vulnerability exists in the parental control...
CVE-2026-9254
An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, B
The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands...
CVE-2026-76072
The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattende
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-71982
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet...
CVE-2026-71943
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerabili
Label Studio does not scope the annotation detail endpoint to the requesting user's organization....
CVE-2026-76073
Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label
AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not...
CVE-2026-76836
AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission gu
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert...
CVE-2026-71942
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. The vulnerab
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the...
CVE-2026-71938
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. The vulnera
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the...
CVE-2026-71939
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. T
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot...
CVE-2026-71936
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the...
CVE-2026-71940
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function.
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the...
CVE-2026-71935
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnera