今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-100730
A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using
CVE-2026-86405
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. Prest
CVE-2026-85531
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenC
CVE-2026-96809
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MultiNet Interacti
CVE-2026-96331
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Sear
CVE-2026-96330
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-
CVE-2026-96328
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - P
CVE-2026-96327
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS w
CVE-2026-94503
Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a W
CVE-2026-93947
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Travele
CVE-2026-107935
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The
CVE-2026-96207
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a
CVE-2026-94510
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privil
CVE-2026-88131
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
CVE-2026-78663
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (
CVE-2026-77900
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a
CVE-2026-69435
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
CVE-2026-56857
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation ca
CVE-2026-84249
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations d
CVE-2026-80381
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements d