今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-98165
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV V
CVE-2026-97308
Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions.
CVE-2026-95594
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.
CVE-2026-95526
Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.
CVE-2026-95105
Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberk
CVE-2026-94675
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack <= 6.2.13 versions.
CVE-2026-94206
Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkom
CVE-2026-66588
Unauthenticated Broken Access Control in The7 <= 14.2.2 versions.
CVE-2026-62072
Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions.
CVE-2026-4889
SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user
CVE-2026-48199
Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions.
CVE-2026-48197
Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allow
CVE-2026-42638
Unauthenticated Broken Access Control in Easy Digital Downloads <= 3.7.1 versions.
CVE-2026-42637
Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions.
CVE-2026-42636
Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions.
CVE-2026-42635
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions.
CVE-2026-42634
Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3
CVE-2026-42418
Unauthenticated Cross Site Scripting (XSS) in Social Rocket <= 1.3.5 versions.
CVE-2026-42416
Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.
CVE-2026-42414
Subscriber SQL Injection in ListingPro <= 2.9.12 versions.