（总）网出证（京）字第281号
输入内容为360CERT网站展示的ICP备案信息（网出证（京）字第281号），并非网络安全漏洞公告。该信息仅用于表明网站已依法完成备案登记，不涉及任何具体产品、漏洞或安全威胁。因此，本摘要基于所提供的有限内容进行说明，不包含任何技术细节、攻
2026-08-27 归档
今日共收录 918 条安全情报，包含 88 个 CVE，417 篇安全通告，以及 120 篇研究论文。
← 返回归档列表京网文〔2020〕6051-1195号
该输入是360CERT公布的一份网络文化经营许可证信息，许可证编号为“京网文〔2020〕6051-1195号”。该信息并非安全漏洞公告，不涉及任何CVE漏洞、受影响产品、攻击路径或安全风险。360CERT是奇虎360旗下的安全研究团队，其官
京ICP证080047号[京ICP备08010314号-6]
该输入并非安全漏洞公告，而是一条 ICP 备案信息记录。标题为“京ICP证080047号[京ICP备08010314号-6]”，来源为 360CERT，链接指向工信部备案管理系统（beian.miit.gov.cn）。输入中不包含任何漏洞描
The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value...
CVE-2026-78333
The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value submitted by unauthenticat
The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription...
CVE-2026-78139
The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription being modified on one
Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla...
CVE-2026-77989
Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1 - bui
The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of...
CVE-2026-78125
The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of its REST endpoints in a
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate...
CVE-2026-77018
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate
Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event...
CVE-2026-77991
Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The admin
Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged...
CVE-2026-77035
Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Eve
The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX...
CVE-2026-78138
The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX action that returns a sal
Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in...
CVE-2026-77990
Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.
The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a...
CVE-2026-77016
The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate prof
A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive...
CVE-2026-47893
A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by inc
The UnZipTransformer does not limit decompressed entry size or entry count when processing...
CVE-2026-59274
The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an at
The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF...
CVE-2026-76549
The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its bac
A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just...
CVE-2026-59275
A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the listener thread — fu
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate...
CVE-2026-77017
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine t
JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted...
CVE-2026-59278
JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these m
When the RabbitMQ management aliveness check fails, the configured admin password is embedded in...
CVE-2026-59271
When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown