今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-82527
R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates
CVE-2026-44506
Medplum is a developer platform that enables development of healthcare apps. In Medplum versions 4.1.10 through 5.1.6, t
CVE-2026-19795
Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY p
CVE-2026-85395
UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any a
CVE-2026-85392
Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint
CVE-2026-85390
Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deleti
CVE-2026-85205
A vulnerability was determined in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function addw
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' quer
CVE-2026-85187
A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue i
CVE-2026-84968
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who su
CVE-2026-83959
Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec
CVE-2026-82023
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenti
CVE-2026-85309
Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Acc
CVE-2026-85306
Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting I
CVE-2026-85305
Server-Side Request Forgery (SSRF) vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEO
CVE-2026-85186
A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is th
CVE-2026-84848
Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.
CVE-2026-84847
Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.
CVE-2026-84812
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.
CVE-2026-84776
Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.