今日共收录 1460 条安全情报，包含 709 个 CVE，466 篇安全通告，以及 13 篇研究论文。
← 返回归档列表CVE-2026-109562
SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal t
CVE-2026-109561
goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user app
CVE-2026-109560
Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run u
CVE-2026-109427
Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allows authenticated toke
CVE-2026-109426
Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the Mongo
CVE-2026-109380
modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entr
CVE-2026-109379
Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enum
CVE-2026-109378
SPIP before 4.4.18 contains a server-side request forgery vulnerability in recuperer_url() in ecrire/inc/distant.php tha
CVE-2026-109377
ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view sto
CVE-2026-109376
ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vulnerability in the get_timesheet_html method that
CVE-2026-109375
Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows san
CVE-2026-108931
A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file dhcp_dynamicip_show.cg
CVE-2026-108930
A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of t
CVE-2026-108928
A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown
CVE-2026-108927
A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unk
CVE-2026-106495
Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package
CVE-2026-105052
IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the
CVE-2024-58389
HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attack
CVE-2022-51020
Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the
CVE-2021-48012
fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by