今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-77762
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomc
CVE-2026-77756
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat caused b
CVE-2026-75973
Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfig
CVE-2026-73581
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implement
CVE-2026-15358
ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unautho
CVE-2026-12370
ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vu
CVE-2026-96442
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends oth
CVE-2026-90950
The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handle
CVE-2026-87978
The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on one branch of its pay
CVE-2026-87848
The MPCX Lightbox WordPress plugin 1.2.2 through 1.2.5 does not have any authorisation or authentication on one of its A
CVE-2026-87071
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which metadata keys a form submission may supply
CVE-2026-87070
The Forminator Forms WordPress plugin before 1.57.2.1 does not verify that a request came from a trusted proxy before pr
CVE-2026-86612
The Ninja Tables WordPress plugin before 5.2.17 does not restrict shortcode expansion to administrator-authored table ro
CVE-2026-86604
The GTranslate WordPress plugin before 5.0.1 does not remove shortcodes from the content of outgoing emails before expan
CVE-2026-86601
The WP Recipe Maker WordPress plugin before 10.8.2 does not remove shortcodes from comment content before expanding it w
CVE-2026-5696
Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/setti
CVE-2026-5695
Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users
CVE-2026-96454
Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings fro
CVE-2026-96443
Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution
CVE-2026-95627
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can