Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
CVE-2026-32555
Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
2026-08-25 归档
今日共收录 1135 条安全情报，包含 329 个 CVE，404 篇安全通告，以及 111 篇研究论文。
← 返回归档列表Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.
CVE-2026-32554
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.
OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the...
CVE-2026-76835
OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, b
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A r...
CVE-2026-71933
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vul
Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filteri...
CVE-2026-71921
Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi inter
Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of UDP message conten...
CVE-2026-71914
Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability i
rConfig 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges du...
CVE-2026-77915
rConfig 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers to sel
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by suppl...
CVE-2026-76071
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submi...
CVE-2026-76070
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated
A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affec...
CVE-2026-19874
A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation
RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer....
CVE-2026-76840
RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper
phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure obje...
CVE-2026-67602
phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attacke
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitr...
CVE-2026-59568
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthe
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.
CVE-2026-59564
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and th
Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.
CVE-2026-66650
Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.
Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.
CVE-2026-66648
Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.
Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.
CVE-2026-66587
Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
CVE-2026-32558
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.
CVE-2026-32551
Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.
Unauthenticated Privilege Escalation in Digits <= 9.2 versions.
CVE-2026-28165
Unauthenticated Privilege Escalation in Digits <= 9.2 versions.