今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-105845
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary ve
CVE-2026-67269
Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulner
CVE-2026-63692
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vuln
CVE-2026-63688
Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function
CVE-2026-61421
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in t
CVE-2026-54472
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in t
CVE-2026-105793
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the p
CVE-2026-91140
An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autono
CVE-2026-77178
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNo
CVE-2026-106037
Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to
CVE-2026-42417
Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.
CVE-2026-42415
Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.
CVE-2026-41555
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions
CVE-2026-39797
Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.
CVE-2026-39795
Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.
CVE-2026-39785
Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.
CVE-2026-39773
Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
CVE-2026-39770
Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.
CVE-2026-39764
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.
CVE-2026-39761
Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.