今日共收录 1258 条安全情报，包含 460 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-103507
Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. A
CVE-2026-103351
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce
CVE-2026-103335
Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video
CVE-2026-103084
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium A
CVE-2026-103079
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting
CVE-2026-103078
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting
CVE-2026-102914
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force P
CVE-2026-102393
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S
CVE-2026-100103
Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented de
CVE-2026-100102
Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with n
CVE-2026-105314
Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call
CVE-2026-105250
A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode_ms_ima of the file
CVE-2026-105249
A weakness has been identified in vgmstream up to r2117. This impacts the function make_group_random of the file src/met
CVE-2026-105248
A security flaw has been discovered in vgmstream up to r2117. This affects the function parse_params/txtp_parse of the f
CVE-2026-105247
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unkno
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain
CVE-2026-105246
A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of th
CVE-2026-105245
A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the fi
CVE-2026-105238
A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of t
CVE-2026-100727
An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files containe