今日共收录 918 条安全情报，包含 88 个 CVE，417 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-77695
CVE-2026-77695 影响 WordPress 插件 'Return Refund and Exchange For WooCommerce' 的 4.6.4 之前版本。该插件用于管理 WooCommerce 订单的退货、退款和换货
CVE-2026-78137
The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthen
CVE-2026-77034
Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager
CVE-2026-47894
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configure
CVE-2026-59270
Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative creden
CVE-2026-16568
The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 doe
CVE-2026-47891
A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the ma
CVE-2026-16569
The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 doe
CVE-2026-80585
In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN
CVE-2026-80589
In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a neve
CVE-2026-80587
In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions So
CVE-2026-80588
In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path
CVE-2026-80586
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpec
CVE-2026-80558
In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from prima
CVE-2026-80551
In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant
CVE-2026-80561
In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decode_lock
CVE-2026-80554
In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Limit the number of channel program
CVE-2026-44701
### Summary An HTML Injection vulnerability exists in the user group creation functionality that allows an attacker to i
CVE-2026-54606
Summary A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the SunEditor Embed plugin. Crafted iframe embed
Firefox browsers