今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-18021
The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shor
CVE-2026-17509
The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter
CVE-2026-16502
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all ver
CVE-2026-12230
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cr
CVE-2026-19614
The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue
CVE-2026-9331
The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized modification of data th
CVE-2026-86590
In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passe
CVE-2026-85400
Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configu
CVE-2026-77132
It has been discovered that several AJAX routes used for the backend localization wizard failed to perform authorization
CVE-2026-86597
Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers
CVE-2026-86550
NuBrowser lacks protocol whitelist validation for the S.browser_fallback_url field of intent://, allowing attackers to i
CVE-2026-74859
The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. A
CVE-2026-67367
A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All
CVE-2026-62654
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated
CVE-2026-62653
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary commu
CVE-2026-62652
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from
CVE-2026-62650
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web
CVE-2026-62649
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or m
CVE-2026-62648
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained i
CVE-2026-62647
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to genera