今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-55823
Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a coun
CVE-2026-54641
OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealm
CVE-2026-54640
OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in ag
CVE-2026-19939
The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device
CVE-2026-110131
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id}
CVE-2026-110129
fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundContr
CVE-2026-110128
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to re
CVE-2026-110127
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that
CVE-2026-110126
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows
CVE-2026-110125
Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members
CVE-2026-110124
FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authent
CVE-2026-110123
Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to
CVE-2026-110122
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle
CVE-2026-110121
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle
CVE-2026-110120
Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows au
CVE-2026-110119
Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows
CVE-2026-110118
WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complet
CVE-2026-110117
SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authentic
CVE-2026-110115
Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileCo
CVE-2026-110114
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to dele