今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-19727
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information
CVE-2026-19205
Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This is
CVE-2026-14466
It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS adm
CVE-2026-85522
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function creat
CVE-2026-85517
A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the
CVE-2026-77818
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information
CVE-2026-52691
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vul
CVE-2026-19081
Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality
CVE-2026-19057
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gastromenum Gastro
CVE-2026-12483
The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.
CVE-2026-85649
(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the A
CVE-2026-85516
A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function
CVE-2026-85514
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st
CVE-2026-85513
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_us
CVE-2026-82309
Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a fo
CVE-2026-74237
GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client function
CVE-2026-74236
GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the diagnostic file deletion handler
CVE-2026-74235
GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the system maintenance configuration
CVE-2026-18198
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TAC Information Se
CVE-2026-85617
snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allow