今日共收录 1656 条安全情报，包含 834 个 CVE，420 篇安全通告，以及 108 篇研究论文。
← 返回归档列表CVE-2026-75908
The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. T
CVE-2026-57910
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agen
CVE-2026-57909
A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to e
CVE-2026-19949
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functiona
CVE-2026-18547
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
CVE-2026-17587
The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass i
CVE-2026-79652
A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat
CVE-2026-78863
A vulnerability was found in liketrek TREK up to 3.0.22. Impacted is the function loginUser of the file server/src/servi
CVE-2026-59335
Improper handling of case sensitivity (CWE-178) in the identity zone authorization check in the Identity Zone Endpoint i
CVE-2026-55976
Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated r
CVE-2026-21758
HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive inf
CVE-2026-21754
HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthori
CVE-2026-21753
HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmainta
CVE-2026-12600
Denial-of-service (DoS) vulnerability in the internal JPEG2000 (JPX) decoding implementation of the Poppler fork develop
CVE-2026-78576
The Readabler plugin for WordPress is vulnerable to SQL Injection in all versions up to 2.0.18 (exclusive) due to insuff
CVE-2026-78572
The Kalles Addons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.6
CVE-2026-76128
The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode At
CVE-2026-75038
UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This is
CVE-2026-75037
Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issu
CVE-2026-49050
General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2