今日共收录 1460 条安全情报，包含 709 个 CVE，466 篇安全通告，以及 13 篇研究论文。
← 返回归档列表CVE-2023-25996
Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-e
CVE-2026-108814
A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a m
CVE-2026-108813
A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Perf
CVE-2026-108812
A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file
CVE-2026-108811
A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php.
CVE-2026-108810
A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the c
CVE-2026-107432
Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly C
CVE-2026-107430
Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhispe
CVE-2026-107429
Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-liv
CVE-2026-107427
Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allo
CVE-2026-106605
Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calcul
CVE-2026-103356
Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly
CVE-2026-93581
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input
CVE-2026-78359
OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser ba
CVE-2026-78358
Several administrative actions do not sufficiently validate whether a request was intentionally initiated by the authent
CVE-2026-78356
The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remot
CVE-2026-78355
A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to refe
CVE-2026-48212
An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the app
CVE-2026-48211
An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Requ
CVE-2026-109082
A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services com