今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-76769
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnera
CVE-2026-107718
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, Adonis
CVE-2026-107406
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. Ne
CVE-2026-84274
IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API
CVE-2026-107394
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior t
CVE-2026-84276
IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthen
CVE-2026-102255
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was pat
CVE-2026-97670
The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi
CVE-2026-103889
The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions
CVE-2026-94589
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable
CVE-2026-107645
The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.5
CVE-2026-104732
The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including
CVE-2026-108474
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
CVE-2026-108264
Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to
CVE-2026-108263
Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow co
CVE-2026-107845
Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, an unauthenticated visitor can submit a commen
CVE-2026-15340
lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.
CVE-2026-108109
PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/co
CVE-2026-108107
PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST e
CVE-2026-105278
The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An