今日共收录 1258 条安全情报，包含 460 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-105642
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost c
CVE-2026-105635
Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/{slug}/proje
CVE-2026-105634
Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows a
CVE-2026-105387
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87b
CVE-2026-105386
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer
CVE-2026-104714
Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Stru
CVE-2026-104713
Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is r
CVE-2026-104712
Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an
CVE-2026-104711
Improper neutralization of special elements used in an expression language statement ('Expression Language Injection') v
CVE-2026-103349
Deserialization of Untrusted Data vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro a
CVE-2026-103334
Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant R
CVE-2026-103086
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control S
CVE-2026-103085
Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This iss
CVE-2026-102383
Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Co
CVE-2026-100515
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo R
CVE-2026-100509
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations R
CVE-2026-93323
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limi
CVE-2026-93322
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds
CVE-2026-93320
BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special