今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-98260
In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread()
CVE-2026-98256
In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec() race Hyunwoo debugged the f
CVE-2026-103346
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex
CVE-2026-94271
The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when hand
CVE-2026-94270
The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider n
CVE-2026-59357
Insufficient verification of data authenticity (CWE-345) in the external OIDC login callback in Cloud Foundry UAA v4.5.0
CVE-2026-105786
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1
CVE-2026-21589
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
CVE-2026-61500
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows s
CVE-2026-21589
Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitra
CVE-2026-59346
VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative pri
CVE-2026-93674
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutraliza
CVE-2026-104334
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of
CVE-2026-106501
Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/pl
CVE-2026-105812
Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before
CVE-2026-79805
An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an
CVE-2026-79801
A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager c
CVE-2026-79798
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privil
CVE-2026-79796
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow
CVE-2026-79794
A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authentic