今日共收录 1127 条安全情报，包含 372 个 CVE，412 篇安全通告，以及 88 篇研究论文。
← 返回归档列表CVE-2026-108606
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that al
CVE-2026-108605
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that al
CVE-2026-97853
Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 b
CVE-2026-78534
Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions.
CVE-2026-78532
Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
CVE-2026-78530
Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.
CVE-2026-66566
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVE-2026-66481
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
CVE-2026-66480
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Produc
CVE-2026-65459
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
CVE-2026-62130
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
CVE-2026-62118
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVE-2026-62117
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVE-2026-62116
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVE-2026-62115
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
CVE-2026-62100
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
CVE-2026-62099
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
CVE-2026-62098
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
CVE-2026-62096
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
CVE-2026-62095
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.