今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-18181
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and
CVE-2026-18180
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensi
CVE-2026-96611
FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values f
CVE-2026-96609
Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console lo
CVE-2026-96600
Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate requ
CVE-2026-96599
Isotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, a
CVE-2026-96275
A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host f
CVE-2026-92419
WEBCON BPS is vulnerable to Insecure Direct Object Reference (IDOR) in the /api/vacations/{path} endpoint. The selectedP
CVE-2026-92164
Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSes
CVE-2026-88974
WPGraphQL provides a GraphQL API for WordPress sites. Prior to 2.22.2, the updatePost mutation in src/Mutation/PostObjec
CVE-2026-73858
Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted
CVE-2026-63002
REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts fil
CVE-2026-63001
REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_
CVE-2026-63000
REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in redaxo/src/addons/in
CVE-2026-62998
REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.
CVE-2026-61834
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and as
CVE-2026-55610
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and
CVE-2026-96559
Rejected reason: This ID was for testing
CVE-2026-96512
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps th
CVE-2026-86683
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy s