今日共收录 1258 条安全情报，包含 460 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-104807
DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious us
CVE-2026-104806
DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the inten
CVE-2026-104805
DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access
CVE-2026-104706
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over
CVE-2026-104675
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly
CVE-2026-104673
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar MP3 Audio P
CVE-2026-104409
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Pho
CVE-2026-104408
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundh
CVE-2026-104407
Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site
CVE-2026-104404
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell
CVE-2026-104401
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Member
CVE-2026-104400
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks
CVE-2026-104397
Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configu
CVE-2026-104396
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name
CVE-2026-104389
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv all
CVE-2026-104388
Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sens
CVE-2026-104386
Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control
CVE-2026-103512
Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. A
CVE-2026-103511
Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An att
CVE-2026-103510
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configura