今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-87013
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /ap
CVE-2026-87012
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, backend/o
CVE-2026-87011
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unaut
CVE-2026-79522
An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to
CVE-2026-79516
An out-of-bounds read in the stbsp_vsnprintf function (stb_sprintf.h) of nothings stb commit 31c1ad3 allows attackers to
CVE-2026-79515
An out-of-bounds read in the stbtt_GetGlyphShape component of nothings stb commit 31c1ad3 allows attackers to cause a De
CVE-2026-79514
An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to cause a De
CVE-2026-79513
A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26
CVE-2026-79387
SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary us
CVE-2026-71808
A SQL Injection vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote authenticated attackers to execute arbi
CVE-2026-71803
money-pos 1.0 contains a stored Cross-Site Scripting (XSS) vulnerability. When processing returns, the backend fails to
CVE-2026-71802
A stored Cross-Site Scripting (XSS) vulnerability exists in the announcement preview component of REBUILD 4.4.3. Althoug
CVE-2026-71801
An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token sec
CVE-2026-53956
Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to versio
CVE-2026-50165
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Acc
CVE-2026-79324
Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4
CVE-2026-73789
A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthent
CVE-2026-73788
A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privile
CVE-2026-73787
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information o
CVE-2026-73786
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct