The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its...
CVE-2026-16600
The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does
2026-08-30 归档
今日共收录 849 条安全情报，包含 76 个 CVE，428 篇安全通告，以及 85 篇研究论文。
← 返回归档列表The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from...
CVE-2026-16061
The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when...
CVE-2026-76651
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when...
CVE-2026-76650
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable
Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51665
Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at
Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...
CVE-2026-51664
Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack
IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter...
CVE-2026-82017
IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that
An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue...
CVE-2026-81533
An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL state
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver...
CVE-2026-81532
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-
A database user able to create a view in a namespace that MongoDB Connector for BI samples can...
CVE-2026-81490
A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling
An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld)...
CVE-2026-81517
An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough r
IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass...
CVE-2026-82018
IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the G
Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51663
Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at
When mongosqld is configured with a client certificate authority file, the listener requests a...
CVE-2026-81518
When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when...
CVE-2026-76649
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action request
Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51661
Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive...
CVE-2026-18904
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthori
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and...
CVE-2026-19294
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and read any user's private
StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard...
CVE-2026-22056
StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are su
IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to...
CVE-2026-17203
IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive informatio