今日共收录 884 条安全情报，包含 132 个 CVE，408 篇安全通告，以及 86 篇研究论文。
← 返回归档列表CVE-2026-82550
A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component N
CVE-2026-82549
A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component Securi
CVE-2026-78699
Unchecked Return Value vulnerability in ash-project ash_postgres allows a user who can drive a tenant rename to a name t
CVE-2026-82658
Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authent
CVE-2026-82657
Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements
CVE-2026-82656
Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated user
CVE-2026-82655
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php
CVE-2026-82654
SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rende
CVE-2026-82653
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package nam
CVE-2026-82652
SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-vi
CVE-2026-82651
SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard (introduced in GHSA-c8r8-95hg-mp34) to the /history/*pa
CVE-2026-82650
SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function (kernel/mo
CVE-2026-82649
SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element
CVE-2026-82648
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails
CVE-2026-82647
WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administ
CVE-2026-82646
WWBN AVideo contains an unauthenticated reflected cross-site scripting vulnerability in the url2Embed.json.php endpoint
CVE-2026-82645
AVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin/Live/view/Live_restreams/get
CVE-2026-82644
WWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in enforceRateLimit(), which pro
CVE-2026-82643
WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php tha
CVE-2026-82548
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the compo