A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthe...

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device mo

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipul...

CVE-2026-79912

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTi

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versio...

CVE-2026-55805

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core

历史摘要 · 未重新核验 · NVD

Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle i...

CVE-2026-54757

Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions

历史摘要 · 未重新核验 · NVD

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's client_id, which is public information, can a...

CVE-2026-44476

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically register

历史摘要 · 未重新核验 · NVD

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerab...

CVE-2026-41707

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDec

历史摘要 · 未重新核验 · NVD

Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1.

CVE-2026-18985

Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in

历史摘要 · 未重新核验 · NVD

Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.

CVE-2026-18261

Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.

历史摘要 · 未重新核验 · NVD

Vulnerability in Drupal Disable Login Page. This issue affects Disable Login Page versions: *.*.

CVE-2026-18260

Vulnerability in Drupal Disable Login Page. This issue affects Disable Login Page versions: *.*.

历史摘要 · 未重新核验 · NVD

Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2.

CVE-2026-18259

Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token

历史摘要 · 未重新核验 · NVD

Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*.

CVE-2026-16646

Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*.

历史摘要 · 未重新核验 · NVD

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.

CVE-2026-16643

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.

历史摘要 · 未重新核验 · NVD

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.

CVE-2026-16642

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Sea...

CVE-2026-16640

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders ve...

CVE-2026-16638

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folde

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Dr...

CVE-2026-15917

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core

历史摘要 · 未重新核验 · NVD

Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from ...

CVE-2026-15916

Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versi

历史摘要 · 未重新核验 · NVD

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.

CVE-2026-15088

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

该输入来源于先知社区发布的新闻，标题为“决赛直播｜第四届阿里CTF安全挑战赛”。文章内容仅涉及阿里CTF（Capture The Flag）安全挑战赛的赛事信息，包括决赛直播安排等，属于网络安全社区的技术竞赛活动，并非实际发生的网络攻击或威

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该文章是阿里云在先知社区发布的一则2027届实习生招聘公告，标题为“抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！”。内容旨在招募优秀学生加入阿里云的安全团队，聚焦AI时代的安全技术研究与攻防对抗。文章不涉及任何具体威胁情报

历史摘要 · 未重新核验 · 先知社区