An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain acc...

CVE-2026-16279

An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Releas

历史摘要 · 未重新核验 · NVD

Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.05...

CVE-2026-74233

Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE242

历史摘要 · 未重新核验 · NVD

Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQ...

CVE-2026-74232

Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink

历史摘要 · 未重新核验 · NVD

Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.

CVE-2026-78292

Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.

历史摘要 · 未重新核验 · NVD

Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.

CVE-2026-78288

Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.

历史摘要 · 未重新核验 · NVD

Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.

CVE-2026-78274

Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.

历史摘要 · 未重新核验 · NVD

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint perfor...

CVE-2026-59354

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registratio

历史摘要 · 未重新核验 · NVD

Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

CVE-2026-32566

Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

历史摘要 · 未重新核验 · NVD

The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file pat...

CVE-2026-77016

The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate prof

历史摘要 · 未重新核验 · NVD

Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network inte...

CVE-2026-59270

Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative creden

历史摘要 · 未重新核验 · NVD

A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit. Spring Framework 7.0.0 - 7.0.8 Sprin...

CVE-2026-47891

A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the ma

历史摘要 · 未重新核验 · NVD

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework ...

CVE-2026-47890

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fr

历史摘要 · 未重新核验 · NVD

Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is ...

CVE-2026-47884

Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping th

历史摘要 · 未重新核验 · NVD

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT

京公网安备 11000002002063号

该输入条目标题为公安备案信息（京公网安备 11000002002063号），来源虽标注为“360CERT 安全报告”，但所附链接指向的是全国互联网安全管理服务平台（beian.gov.cn）的备案信息查询页面，并未包含任何威胁情报正文、攻击

历史摘要 · 未重新核验 · 360CERT 安全报告

（总）网出证（京）字第281号

该条目未包含任何可分析的威胁情报摘要。标题为'（总）网出证（京）字第281号'，可能是一个许可证编号，来源URL指向360CERT的许可证页面，发布日期为2026-08-28。文章正文缺失，无CVE、无攻击者信息、无恶意软件家族、无行业、无

历史摘要 · 未重新核验 · 360CERT 安全报告

京网文〔2020〕6051-1195号

本次输入未包含可用的威胁情报正文。来源链接指向的是360网站备案信息页面，标题为“京网文〔2020〕6051-1195号”，属于互联网内容许可编号，而非安全报告或技术分析。标签中虽然出现“360、malware、report、apt”，但正

历史摘要 · 未重新核验 · 360CERT 安全报告

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & Logic.

CVE-2026-82123

CVE-2026-82123 是 Tangible Loops & Logic 产品中存在的一个跨站脚本（XSS）漏洞。该漏洞源于对用户输入内容在生成网页时未进行恰当的中和（improper neutralization），导致攻击者能够向

历史摘要 · 未重新核验 · NVD

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclock_miscdev_mmap() rejects writable map...

CVE-2026-80724

CVE-2026-80724 是 Linux 内核中的一个漏洞，相关模块为 ptp: vmclock，涉及共享时钟 ABI 页面的内存映射权限管理。漏洞的核心在于 vmclock_miscdev_mmap() 函数在拒绝可写映射时，没有清除

历史摘要 · 未重新核验 · NVD