今日共收录 1784 条安全情报，包含 814 个 CVE，581 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-6205
An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-
CVE-2026-56597
HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthe
CVE-2026-56595
HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin he
CVE-2026-56592
HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate a
CVE-2026-56590
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation c
CVE-2026-4036
An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in
CVE-2026-40539
An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-1
CVE-2026-40538
An improper restriction of excessive authentication attempts vulnerability in Auto block in Synology DiskStation Manager
CVE-2026-40537
A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7.2.1-
CVE-2026-40536
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology
CVE-2026-40535
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synolo
CVE-2026-40534
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in Sy
CVE-2026-40533
An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (
CVE-2026-40532
A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-
CVE-2026-40531
An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-690
CVE-2026-40530
An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manage
CVE-2026-21848
HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticat
CVE-2026-21822
HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handl
CVE-2026-13683
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in EventScheduler
CVE-2026-13673
An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM)