今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-82298
Incorrect Authorization (CWE-863) in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access C
CVE-2026-78596
Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana
CVE-2026-78595
Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet
CVE-2026-78593
An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kiban
CVE-2026-78583
Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153). El
CVE-2026-49455
Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' quer
CVE-2026-15431
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The
CVE-2026-85187
A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue i
CVE-2026-85012
Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynthesis framework in Ama
CVE-2026-84968
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who su
CVE-2026-83959
Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec
CVE-2026-82024
LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated
CVE-2026-82023
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenti
CVE-2026-63219
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the A
CVE-2026-85309
Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Acc
CVE-2026-85308
Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrect
CVE-2026-85307
Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve Embedded
CVE-2026-85306
Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting I
CVE-2026-85305
Server-Side Request Forgery (SSRF) vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEO