今日共收录 1494 条安全情报，包含 600 个 CVE，479 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2025-15613
Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality. An attack
CVE-2023-54356
Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_
CVE-2026-84165
A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior t
CVE-2026-84059
A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromIns
CVE-2026-82927
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affec
CVE-2026-82926
NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mT
CVE-2026-4813
A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administ
CVE-2026-59681
A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration
CVE-2026-59680
An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, g
CVE-2026-25706
Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls
CVE-2026-19914
The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_order' paramete
CVE-2026-16788
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
CVE-2026-16786
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
CVE-2026-15101
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in
CVE-2026-78363
The MW WP Form WordPress plugin before 5.1.5 does not prevent shortcodes in user-submitted values from being executed wh
CVE-2026-74916
The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its pa
CVE-2026-78319
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An un
CVE-2026-77189
The Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) plugin fo
CVE-2026-75964
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v
CVE-2026-18488
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute (b