The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is...
CVE-2026-104022
The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege E
2026-10-10 归档
今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。
← 返回归档列表The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-93883
The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phon
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-103755
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-16681
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an...
CVE-2026-22061
Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-18524
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary...
CVE-2026-78797
An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in t
Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected...
CVE-2026-78835
Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials.
OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP...
CVE-2026-75352
OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path par
OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP...
CVE-2026-75353
OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path p
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-8457
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP...
CVE-2026-75351
OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path pa
Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage
CVE-2026-107805
## Summary In Nginx UI versions 2.5.0 through 2.5.x, the node-signature authentication path staged an attacker-controll
@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS
CVE-2026-108260
### Summary `` renders a rich-text AST into the DOM and, for `a` nodes, assigns the node's URL straight to the anchor's
Shiny for Python has path traversal in bookmark restore
CVE-2026-108258
### Impact Shiny for Python's bookmark-restore path accepted a client-supplied `_state_id_` query-string value and join
Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled
CVE-2026-107842
`ModuleSearch` decides whether to filter protected pages out of search results based on the current value of `contao.sea
Contao: The registration module re-sends activation mails
CVE-2026-107843
`ModuleRegistration::compile()` reaches its follow-up registration branch on **any** POST to a page carrying the module.
Contao: Cross-site request forgery in custom backend actions
CVE-2026-107848
`RequestTokenListener` is the only generic `REQUEST_TOKEN` validator in Contao and it only runs on POST. On the GET side
Contao: Path traversal in the images controller
CVE-2026-107844
`ImagesController` joins the user controlled `{path}` onto the configured image target directory with `Path::join()`, wh
Contao: Improper access control in the preview links module
CVE-2026-107850
`core-bundle/config/services.yaml` registers the preview access voter with the class `Contao\CoreBundle\Security\Voter\D