今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-39460
Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration fil
CVE-2026-39453
Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool l
CVE-2026-33367
SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or de
CVE-2026-33272
A malicious user with physical access to the device can boot the switch from factory settings without authentication, us
CVE-2026-32645
Default factory credentials with administrative access are enabled and persist even after configuring other administrato
CVE-2026-29797
No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to t
CVE-2026-28745
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption.
CVE-2026-108125
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. T
CVE-2026-108124
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. T
CVE-2026-108108
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Passwor
CVE-2026-108106
Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaus
CVE-2026-108105
Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows r
CVE-2026-108104
Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that
CVE-2026-108103
Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_dropped_dl_traffic_threshold()
CVE-2026-108102
Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfc
CVE-2026-108101
HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that al
CVE-2026-108100
HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL
CVE-2026-107806
Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with a
CVE-2026-107805
Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication pat
CVE-2026-107804
Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not pr