The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id...
CVE-2026-103425
The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all vers
2026-10-14 归档
今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。
← 返回归档列表The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up...
CVE-2026-103423
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7
The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is...
CVE-2026-104767
The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Esc
The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is...
CVE-2026-17092
The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authoriz
The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary...
CVE-2026-107652
The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions
A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows...
CVE-2026-110385
A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attack
The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up...
CVE-2026-104995
The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 v
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This...
CVE-2026-110359
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privilege
Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows...
CVE-2026-15468
Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalati
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...
CVE-2026-95632
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-104922
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...
CVE-2026-48378
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-105151
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute...
CVE-2026-110168
Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
CVE-2026-110171
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code insi
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
CVE-2026-110166
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code
Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate...
CVE-2026-77207
Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libres
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...
CVE-2026-48377
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur
Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute...
CVE-2026-110169
Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
CVE-2026-110172
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code insi