今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-88866
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability
CVE-2026-88863
capgo.app (npm package `capgo`) through version 12.207.1 does not compare the caller's role rank against the requested r
CVE-2026-88862
Capgo (capgo.app) backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-i
CVE-2026-88860
Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving st
CVE-2026-88790
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath o
CVE-2026-85217
A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network prox
CVE-2026-75584
ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to cras
CVE-2026-6285
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/L
CVE-2026-64838
ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, al
CVE-2026-64837
ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authentica
CVE-2026-64836
ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error i
CVE-2026-45763
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St
CVE-2026-38626
Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php.
CVE-2026-12683
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation
CVE-2026-12682
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation
CVE-2026-9166
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab L
CVE-2026-9161
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue af
CVE-2026-88038
cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2
CVE-2026-85545
There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API i
CVE-2026-85544
There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attack