今日共收录 1361 条安全情报，包含 499 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-104416
Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff user
CVE-2026-104415
Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level
CVE-2026-104414
Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untr
CVE-2026-104413
Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including
CVE-2026-104412
Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Edi
CVE-2026-104411
Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scr
CVE-2026-104410
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish readers to read password-protec
CVE-2026-103763
SiYuan before v3.8.5 contains an information disclosure vulnerability that allows read-only publish readers to learn met
CVE-2026-103762
SiYuan before v3.8.5 contains a missing authorization vulnerability in the getRefCreateSavePath, getShorthandSavePath, a
CVE-2026-97876
A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot a
CVE-2026-96990
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Erlang bindings. This issue affec
CVE-2026-94651
improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in Apach
CVE-2026-94650
Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.
CVE-2026-94645
Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability i
CVE-2026-94644
Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects
CVE-2026-94642
Uncaught exception vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. U
CVE-2026-94633
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache
CVE-2026-93926
Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability i
CVE-2026-93925
Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. T
CVE-2026-91137
Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iter