今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。
← 返回归档列表CVE-2026-71378
ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requ
CVE-2026-71257
Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apa
CVE-2026-70449
Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote attacker to read files
CVE-2026-82880
YaCy Search Server through 1.941 contains an XML external entity injection vulnerability in SVG, FreeMind, and OpenSearc
CVE-2026-82879
DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to th
CVE-2026-82878
DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, an
CVE-2026-82877
ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the
CVE-2026-82876
Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image
CVE-2026-82680
A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of t
CVE-2026-82679
A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the
CVE-2026-82678
A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of
CVE-2026-82677
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/mo
CVE-2026-82671
A vulnerability has been found in IObit Unlocker 1.3.0.12. This vulnerability affects the function ZwTerminateProcess in
CVE-2026-82670
A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTROL in the library IUF
CVE-2026-82669
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of
CVE-2026-19873
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query strin
CVE-2026-82875
ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller endpoints that accept or
CVE-2026-82873
ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/resources/export endpo
CVE-2026-82871
ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated u
CVE-2026-82869
ToolJet Database versions before v3.16.44 contain a privilege escalation vulnerability in the join_tables endpoint that