今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。
← 返回归档列表CVE-2024-58379
nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUr
CVE-2026-82838
The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered wi
CVE-2026-82631
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlocked
CVE-2026-82630
A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager.getOrCreateConnecti
CVE-2026-82629
A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affect
CVE-2026-58301
When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that c
CVE-2026-82628
A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the lib
CVE-2026-82625
A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /r
CVE-2026-82624
A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality
CVE-2026-82623
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backe
CVE-2026-82622
A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown f
CVE-2026-77013
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may invoke, and
CVE-2026-68951
GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker
CVE-2026-53620
GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If
CVE-2026-40465
NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.
CVE-2026-40464
NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow appl
CVE-2026-40463
WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successfu
CVE-2026-82621
A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e.
CVE-2026-82620
A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4
CVE-2026-82619
A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitored_item_event_