Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and...
CVE-2026-116012
Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining
2026-10-25 归档
今日共收录 737 条安全情报，包含 0 个 CVE，411 篇安全通告，以及 64 篇研究论文。
← 返回归档列表IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive...
CVE-2026-115998
IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept
Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows...
CVE-2026-114705
Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Con
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114194
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114693
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs Al
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114695
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network
Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to...
CVE-2026-115975
Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delet
Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache...
CVE-2026-114190
Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespee
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114178
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold Grid W3 Total
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114697
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuarkA QA Analytic
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-112844
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114179
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114694
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Ma
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-112869
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Hearle We’re
BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before...
CVE-2026-108013
BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust cer
A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function...
CVE-2026-115803
A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function...
CVE-2026-115802
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/Aut
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting...
CVE-2026-110892
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces
The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or...
CVE-2026-97353
The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before
The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability...
CVE-2026-97352
The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX a