A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects...
CVE-2026-108772
A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Joi
2026-10-12 归档
今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the...
CVE-2026-108774
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinal
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-104703
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via...
CVE-2026-108978
Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables.
A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown...
CVE-2026-108769
A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in...
CVE-2026-108925
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Admini
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename...
CVE-2026-108976
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has
databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g.,...
CVE-2026-108963
databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a data
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the...
CVE-2026-108768
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of th
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because...
CVE-2026-108913
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into
Improper neutralization of special elements used in an SQL command ('SQL injection')...
CVE-2026-59508
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. T
Several Postiz endpoints return the complete database row of the record they operate on instead...
CVE-2026-107761
Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the c
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108888
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108887
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler tha
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that...
CVE-2026-108903
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated att
pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in...
CVE-2026-108905
pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allo
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the...
CVE-2026-108902
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePho
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController...
CVE-2026-108891
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId ha
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability...
CVE-2026-108904
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API client
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController...
CVE-2026-108886
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername