今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-80355
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerabi
CVE-2026-80218
Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker holding a sign-in token for o
CVE-2026-78528
Unauthenticated Broken Access Control in BerqWP <= 4.1.15 versions.
CVE-2026-78295
Unauthenticated Cross Site Request Forgery (CSRF) in Xagio SEO <= 7.1.0.43 versions.
CVE-2026-78294
Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.
CVE-2026-78223
Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the
CVE-2026-74017
Unauthenticated Broken Access Control in User Registration <= 5.2.7 versions.
CVE-2026-74005
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Series <= 3.1.3 versions.
CVE-2026-74002
Unauthenticated Broken Access Control in Booking Calendar <= 11.7 versions.
CVE-2026-74000
Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.
CVE-2026-73999
Contributor Insecure Direct Object References (IDOR) in Cooked <= 1.16.0 versions.
CVE-2026-71568
In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requir
CVE-2026-66676
Unauthenticated Broken Access Control in Easy Invoice <= 2.3.8 versions.
CVE-2026-66631
Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.
CVE-2026-66630
Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.
CVE-2026-66628
Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions.
CVE-2026-66626
Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.
CVE-2026-66625
Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.
CVE-2026-66624
Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.
CVE-2026-66619
Administrator SQL Injection in Newsletters <= 4.18 versions.