今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-91793
When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attribut
CVE-2026-91792
When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations throug
CVE-2026-91791
When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition invo
CVE-2026-91790
When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional conte
CVE-2026-91789
Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and relate
CVE-2026-91788
When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks r
CVE-2026-50228
An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (ver
CVE-2026-50227
An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSens
CVE-2026-6831
The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and in
CVE-2026-5924
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps bloc
CVE-2026-93528
The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an
CVE-2026-93511
The Premium Packages WordPress plugin before 7.2.1 does not verify PayPal's webhook signature before processing payment
CVE-2026-93510
The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or res
CVE-2026-93508
The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX acti
CVE-2026-93507
The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post
CVE-2026-91077
The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event listing query to ev
CVE-2026-91073
The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputti
CVE-2026-91025
The Booking Manager WordPress plugin before 2.1.21 does not verify that a request to modify a user's Booking Manager W
CVE-2026-91024
The Booking Manager WordPress plugin before 2.1.21 does not sanitize and escape values taken from a fetched external iC
CVE-2026-90985
The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection