The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-2585
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘rootAttributes’ para
2026-09-18 归档
今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate...
CVE-2026-85917
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a netw
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for...
CVE-2026-18441
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to I
Improper neutralization of input during web page generation ('cross-site scripting') in Azure...
CVE-2026-83946
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthori
Rejected reason: reserved but not needed
CVE-2026-78668
Rejected reason: reserved but not needed
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose...
CVE-2026-68791
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network
Improper neutralization of special elements used in a command ('command injection') in Microsoft...
CVE-2026-55946
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
Improper neutralization of special elements used in a command ('command injection') in Microsoft...
CVE-2026-78501
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of...
CVE-2026-93307
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Coll
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-65323
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to...
CVE-2026-16750
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of da
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to...
CVE-2026-14311
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized access and
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-11432
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to...
CVE-2026-16582
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized modificatio
A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built...
CVE-2026-93393
A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platf
Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to...
CVE-2026-93382
Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code ins
Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52...
CVE-2026-93375
Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker
Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker...
CVE-2026-93383
Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin d
A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an...
CVE-2026-93395
A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when proc
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote...
CVE-2026-93387
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-orig