今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-90843
A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. This
CVE-2026-85657
The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vu
CVE-2026-85575
The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widg
CVE-2026-90842
A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown f
CVE-2026-90841
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is a
CVE-2026-90840
A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of
CVE-2026-91200
DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attack
CVE-2026-90835
A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the
CVE-2026-90831
A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the fi
CVE-2026-90830
A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of t
CVE-2026-90829
A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the f
CVE-2026-81900
Concrete CMS before 9.5.3 applied only trim() to the YouTube block's stored width and height values and printed them int
CVE-2026-77191
An authenticated supplicant on an adjacent network may bypass intended network authorization policy and send unrestricte
CVE-2026-75943
A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the cle
CVE-2026-18116
Concrete CMS 8.3.0 to 9.5.2 stored calendar event names without sanitization and rendered them without HTML escaping in
CVE-2026-14986
The ITE it51xxx I2C driver, when operating as an I2C target (slave) in buffer mode (CONFIG_I2C_TARGET + CONFIG_I2C_TARGE
CVE-2026-91181
Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 Fail to sanitize Team obje
CVE-2026-91145
Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to
CVE-2026-91143
goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated
CVE-2026-90828
A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible