今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-54506
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5
CVE-2026-54343
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
CVE-2026-53557
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated use
CVE-2026-53556
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/dat
CVE-2026-53555
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated upl
CVE-2026-53554
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/dat
CVE-2026-53534
JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef'
CVE-2026-50291
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
CVE-2026-50158
yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool
CVE-2026-16750
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of da
CVE-2026-16582
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized modificatio
CVE-2026-14311
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized access and
CVE-2026-11432
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-93395
A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when proc
CVE-2026-93394
A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and
CVE-2026-93393
A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platf
CVE-2026-93387
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-orig
CVE-2026-93386
UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging soci
CVE-2026-93385
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive informat
CVE-2026-93384
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker l