今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-80728
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" dev
CVE-2026-80727
In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI disco
CVE-2026-80726
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when crea
CVE-2026-80465
A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 1
CVE-2026-80253
An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical acces
CVE-2026-79679
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue af
CVE-2026-78304
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-78080
Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid parameter is used i
CVE-2026-78069
Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4
CVE-2026-78065
Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-
CVE-2026-78064
Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.2
CVE-2026-78000
Joomla Extension - j2commerce.com - Reflected XSS via `filter_tag`, `pricefrom` and `priceto` in J2Store 1.0.0-3.3.21, 4
CVE-2026-77999
Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Sto
CVE-2026-76642
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, al
CVE-2026-76178
A stored Cross-Site Scripting (XSS) vulnerability in the notification template functionality of the endpoint /ocsreports
CVE-2026-76177
Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient
CVE-2026-76176
SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of th
CVE-2026-76175
SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input prov
CVE-2026-76174
Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admin_info endpoint. The a
CVE-2026-74769
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the RES