今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-103063
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ElementsKit
CVE-2026-102394
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essent
CVE-2026-102390
Missing Authorization vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-fo
CVE-2026-102382
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploit
CVE-2026-102381
Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured
CVE-2026-102379
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme BuildKi
CVE-2026-94276
Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspectio
CVE-2026-94269
Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations whe
CVE-2026-94220
Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacke
CVE-2026-94212
Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could i
CVE-2026-103858
MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a
CVE-2026-103754
A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on t
CVE-2026-103680
A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numb
CVE-2026-103679
A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport
CVE-2026-103678
A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing un
CVE-2026-103336
Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate
CVE-2026-88789
Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apa
CVE-2026-82806
Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.
CVE-2026-78242
Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unm
CVE-2026-103757
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUr