Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent...
CVE-2026-94057
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead dep
2026-09-20 归档
今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。
← 返回归档列表Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that...
CVE-2026-93992
Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write
Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input,...
CVE-2026-93990
Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input, allowing malformed UTF-1
QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin...
CVE-2026-93988
QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows a
vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's...
CVE-2026-93989
vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in Sa
A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this...
CVE-2026-93955
A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this vulnerability is the functio
A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function...
CVE-2026-93956
A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighl
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in...
CVE-2026-93991
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-89155
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected...
CVE-2026-93954
A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected is the function AppSet
Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD...
CVE-2026-82560
Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting d
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL...
CVE-2026-93982
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plain
rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve...
CVE-2026-93987
rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin.
OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries,...
CVE-2026-93983
OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries, allowing authenticated users
rclone before 1.75.1 fails to confine names from server and third-party listing responses to the...
CVE-2026-93986
rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allow
OpenPanel tracking API through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 fails to verify...
CVE-2026-93984
OpenPanel tracking API through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 fails to verify client secret cryptograph
hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback...
CVE-2026-93981
hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a stri
The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to...
CVE-2026-9613
The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to authorization bypass in all version
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-5410
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the spinner field in versions
The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-8354
The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pop_tag' paramete