今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-53636
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a securit
CVE-2026-53635
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view
CVE-2026-52833
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runt
CVE-2026-52832
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard e
CVE-2026-52831
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio control
CVE-2026-20281
A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that ar
CVE-2026-20280
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineer
CVE-2026-20278
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
CVE-2026-20277
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
CVE-2026-20276
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
CVE-2026-20275
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
CVE-2026-84838
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary com
CVE-2026-84837
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename o
CVE-2026-84677
Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and versio
CVE-2026-84676
Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the J
CVE-2026-84675
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build en
CVE-2026-84674
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read per
CVE-2026-84673
Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configura
CVE-2026-84672
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions us
CVE-2026-84671
Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins