今日共收录 1006 条安全情报，包含 268 个 CVE，456 篇安全通告，以及 21 篇研究论文。
← 返回归档列表CVE-2026-86300
A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Man
CVE-2026-78325
Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allow
CVE-2026-2390
The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processi
CVE-2026-86351
Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path begins with
CVE-2026-86298
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown func
CVE-2026-86297
A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the f
CVE-2026-86295
A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpack
CVE-2026-86294
A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unkno
CVE-2026-85640
Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdate
CVE-2026-85201
In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-
CVE-2026-77699
Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to l
CVE-2026-77697
Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Ext
CVE-2026-19204
A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to at
CVE-2025-52657
HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the
CVE-2025-52652
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content,
CVE-2025-52651
HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause u
CVE-2026-86347
Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry
CVE-2026-86293
A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown
CVE-2026-86292
A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the
CVE-2026-86291
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown funct