今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-79410
Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated atta
CVE-2026-79409
An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and th
CVE-2026-78081
Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0
CVE-2026-73467
On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal A
CVE-2026-73466
On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to lo
CVE-2026-73465
On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear tex
CVE-2026-73451
On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Vi
CVE-2026-69214
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware stores a
CVE-2026-69213
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/2 serializes outbound frames t
CVE-2026-69212
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware stri
CVE-2026-69211
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResponseCookie.render writes attacker-inf
CVE-2026-69209
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The shared WebSocket decoder permits unbo
CVE-2026-69208
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes
CVE-2026-69204
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/1.1 does not reject messages c
CVE-2026-69201
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResourceService and WebjarService decode
CVE-2026-68534
Concrete CMS before 9.5.3 rendered Express entry labels as raw HTML when displaying associated entries, resulting in sto
CVE-2026-68533
Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluatin
CVE-2026-68532
Concrete CMS 9.0.0 to dashboard group type controller did not validate a CSRF token on its delete action, resulting in c
CVE-2026-68531
Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file m
CVE-2026-68530
Concrete CMS 9 through 9.5.2 did not perform an authorization check on several board-instance actions in the Boards area