今日共收录 1135 条安全情报，包含 329 个 CVE，404 篇安全通告，以及 111 篇研究论文。
← 返回归档列表CVE-2026-59566
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Cli
CVE-2026-59565
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of
CVE-2026-30512
A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bach
CVE-2026-21751
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized
CVE-2026-17033
An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert
CVE-2025-68833
HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker u
CVE-2026-78365
Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 all
CVE-2026-78247
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown proc
CVE-2026-21759
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. A
CVE-2026-21756
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to intr
CVE-2026-78323
A flaw was found in JSS (Java Security Services). The JSSTrustManager class does not verify NSS trust flags when validat
CVE-2026-78291
Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.
CVE-2026-78290
Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions.
CVE-2026-78280
Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.
CVE-2026-78279
Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.
CVE-2026-78278
Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.
CVE-2026-78277
Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.
CVE-2026-78272
Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.
CVE-2026-78270
Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.
CVE-2026-78269
Contributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions.