今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-105648
Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, su
CVE-2026-105647
Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, s
CVE-2026-105392
A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of
CVE-2026-105389
A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing
CVE-2026-105388
A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the fi
CVE-2026-104030
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a spec
CVE-2026-104029
A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the
CVE-2026-103348
Deserialization of Untrusted Data vulnerability in Smackcoders Inc. WP Ultimate Exporter wp-ultimate-exporter allows Obj
CVE-2026-103337
Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Conf
CVE-2026-103066
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Bo
CVE-2026-100511
Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-google-job-posting-manag
CVE-2026-100506
Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.
CVE-2026-97309
Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensit
CVE-2026-97305
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-li
CVE-2026-97304
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Contr
CVE-2026-97303
Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website
CVE-2026-97275
Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerc
CVE-2026-97070
Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting I
CVE-2026-95166
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payloa
CVE-2026-95165
Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field.