今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-2310
IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE
CVE-2025-57231
Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local file
CVE-2026-9667
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a rem
CVE-2026-9327
IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role
CVE-2026-9225
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging
CVE-2026-9176
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls
CVE-2026-89089
A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridi
CVE-2026-79592
An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validat
CVE-2026-79591
A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insuf
CVE-2026-76652
An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2,
CVE-2026-63427
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user
CVE-2026-45761
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr
CVE-2026-45759
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr
CVE-2026-45752
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St
CVE-2026-45751
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr
CVE-2026-3096
The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the origina
CVE-2026-19596
An XML External Entity (XXE) vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Hori
CVE-2026-19136
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively
CVE-2026-18994
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distribute
CVE-2026-11813
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a lo