今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-107145
The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the l
CVE-2026-102789
Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorCon
CVE-2026-102788
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the
CVE-2026-102787
Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
CVE-2026-65213
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BM
CVE-2026-65211
This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby exe
CVE-2026-65220
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate
CVE-2026-65219
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP mess
CVE-2026-65210
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing mat
CVE-2026-18451
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation m
CVE-2026-18449
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to c
CVE-2026-16521
An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command p
CVE-2026-111461
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabl
CVE-2026-111460
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauth
CVE-2026-111459
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditi
CVE-2026-10511
The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget_password_link' para
CVE-2026-107472
An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Q
CVE-2026-101034
An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and
CVE-2026-75891
The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and
CVE-2026-110910
### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even t