A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability...
CVE-2026-115981
A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown function
2026-10-25 归档
今日共收录 737 条安全情报，包含 0 个 CVE，411 篇安全通告，以及 64 篇研究论文。
← 返回归档列表A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the...
CVE-2026-115973
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword
A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the...
CVE-2026-115970
A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-updat
A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file ...
CVE-2026-115969
A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the com
A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of...
CVE-2026-115971
A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/we
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this...
CVE-2026-115972
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user...
CVE-2026-115557
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without ce
Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi...
CVE-2026-114704
Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.T
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows...
CVE-2026-114192
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configure
Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header...
CVE-2026-114629
Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body para
ONEARMY community-platform before 2.165.2 contains an insecure direct object reference...
CVE-2026-116018
ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent
BookStack before 26.09.2 contains an incorrect authorization vulnerability in...
CVE-2026-116020
BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authentic
Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to...
CVE-2026-116019
Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public
open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription...
CVE-2026-116014
open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bi
Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in...
CVE-2026-116017
Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceCo
Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the...
CVE-2026-116009
Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to wr
The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation...
CVE-2026-110018
The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordP
DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController:...
CVE-2026-116008
DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allo
Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that...
CVE-2026-116011
Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthentica
OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in...
CVE-2026-116013
OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_n