今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-105870
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delight Star Inc.
CVE-2026-105318
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Datasolution AcyMa
CVE-2026-104392
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Inj
CVE-2026-104079
Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint
CVE-2026-103413
Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled
CVE-2026-103412
Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.
CVE-2026-103220
The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when pars
CVE-2026-101130
The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when pars
CVE-2026-101094
The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 characte
CVE-2026-89235
The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it
CVE-2026-87846
The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership chec
CVE-2026-86851
The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acti
CVE-2026-85348
The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its setting
CVE-2026-62042
Missing Authorization vulnerability in unFocus Projects Scripts n Styles scripts-n-styles allows Exploiting Incorrectly
CVE-2026-62041
Missing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allows Exploiting Incorrectly Conf
CVE-2026-62040
Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-a
CVE-2026-62039
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5 Aud
CVE-2026-62036
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks a
CVE-2026-39779
Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Acce
CVE-2026-107419
Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allo