The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function...
CVE-2026-92807
The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invocation in all versions u
2026-09-19 归档
今日共收录 1784 条安全情报，包含 814 个 CVE，581 篇安全通告，以及 100 篇研究论文。
← 返回归档列表The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to,...
CVE-2026-15660
The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. Thi
The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all...
CVE-2026-87909
The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versions via the wppa_image_m
The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in...
CVE-2026-15760
The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-13354
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Cont
The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty'...
CVE-2026-77820
The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in all
The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-12042
The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all v
SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark...
CVE-2026-93923
SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing st
SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without...
CVE-2026-93922
SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing store
SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon...
CVE-2026-93921
SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon endpoint, allowing read-only
The application protects access through its calculator-style vault passcode, but the stored data...
CVE-2026-77875
The application protects access through its calculator-style vault passcode, but the stored data is not bound to that au
A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this...
CVE-2026-93574
A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding...
CVE-2026-93562
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to...
CVE-2026-84108
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization
Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users...
CVE-2026-93868
Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecover.php, creati
vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel...
CVE-2026-93841
vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs ind
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive...
CVE-2026-84105
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:...
CVE-2026-93871
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticate
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler...
CVE-2026-93873
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to
vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output...
CVE-2026-93840
vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in Sampling