今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-57822
When the broker is processing message-based management requests, sent by an authenticated messaging client that is autho
CVE-2026-49363
An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a SUBS
CVE-2026-49362
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized br
CVE-2026-76562
The Sidebar Manager Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sbm_description' pa
CVE-2026-4657
The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the control_selectors meta f
CVE-2026-18594
The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc
CVE-2026-18386
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and i
CVE-2026-15823
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c
CVE-2026-15820
The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attribu
CVE-2026-15796
The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bg_video_service_url
CVE-2026-15019
The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and
CVE-2026-14873
The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions
CVE-2026-87870
The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Param
CVE-2026-84063
BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnera
CVE-2026-84062
BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulner
CVE-2026-19584
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor
CVE-2026-87933
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_MergePatch o
CVE-2026-87926
A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue
CVE-2026-87925
A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Thi
CVE-2026-87924
A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c